CVE-2026-8249: Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
A flaw has been found in Open5GS up to 2.7.7. The impacted element is the function updateauthorizedpccruleandqos of the file /src/smf/npcf-handler.c of the component SMF. This manipulation causes denial of service. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8249?
CVE-2026-8249 is classified as a denial of service vulnerability in Open5GS versions up to 2.7.7.
How does CVE-2026-8249 affect Open5GS?
CVE-2026-8249 affects the update_authorized_pcc_rule_and_qos function in the SMF component, leading to potential service interruptions.
How can I mitigate CVE-2026-8249?
Mitigation for CVE-2026-8249 involves upgrading Open5GS to a version beyond 2.7.7 where this vulnerability is resolved.
What specific versions of Open5GS are impacted by CVE-2026-8249?
CVE-2026-8249 impacts all versions of Open5GS up to and including 2.7.7.
Is there a known exploit for CVE-2026-8249?
Details about specific exploits for CVE-2026-8249 have not been publicly disclosed, but the vulnerability can cause denial of service if exploited.