CVE-2026-8225: Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_handle_delete denial of service
A vulnerability was identified in Open5GS up to 2.7.7. This affects the function pcfnpcfsmpolicycontrolhandledelete of the file src/pcf/sm-sm.c of the component delete Endpoint. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8225?
CVE-2026-8225 has a severe impact as it can lead to a denial of service in Open5GS.
How do I fix CVE-2026-8225?
To fix CVE-2026-8225, it is recommended to upgrade to the latest version of Open5GS that addresses this vulnerability.
What versions are affected by CVE-2026-8225?
CVE-2026-8225 affects Open5GS versions up to 2.7.7.
What component is impacted by CVE-2026-8225?
CVE-2026-8225 impacts the delete Endpoint function within the pcf_npcf_smpolicycontrol_handle_delete component.
What types of attacks can CVE-2026-8225 facilitate?
CVE-2026-8225 can facilitate denial of service attacks against servers running vulnerable versions of Open5GS.