CVE-2026-8267: Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of service
Published May 11, 2026
·Updated
A flaw has been found in Open5GS up to 2.7.7. This vulnerability affects the function smfnsmfhandlecreateddatainvsmf of the component SMF. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
2 affected components
open5gs Open5GS SMF<=2.7.7
open5gs open5gs<=2.7.7
Event History
May 11, 2026
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeaknessAffected Software
Feb 4, 58345
Event
via FIRST·04:26 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-8267?
CVE-2026-8267 has been assessed as a denial of service vulnerability.
2
How do I fix CVE-2026-8267?
To mitigate CVE-2026-8267, upgrade to version 2.7.8 or later of Open5GS SMF.
3
Which versions of Open5GS are affected by CVE-2026-8267?
CVE-2026-8267 affects Open5GS SMF versions up to 2.7.7.
4
Can CVE-2026-8267 be exploited remotely?
Yes, CVE-2026-8267 can be exploited remotely, leading to denial of service.
5
What component of Open5GS is impacted by CVE-2026-8267?
CVE-2026-8267 impacts the SMF component of Open5GS.