CVE-2026-8290: Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service
A security flaw has been discovered in Open5GS up to 2.7.7. This issue affects the function smfnsmfhandleupdatedatainvsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8290?
CVE-2026-8290 is classified as a denial of service vulnerability.
How do I fix CVE-2026-8290?
To address CVE-2026-8290, upgrade Open5GS to version 2.7.8 or later.
What component of Open5GS is affected by CVE-2026-8290?
CVE-2026-8290 affects the SMF component, specifically the function smf_nsmf_handle_update_data_in_vsmf.
Which versions of Open5GS are impacted by CVE-2026-8290?
CVE-2026-8290 affects Open5GS versions up to and including 2.7.7.
What potential impact does CVE-2026-8290 have on systems?
CVE-2026-8290 may lead to a denial of service, causing affected systems to become unresponsive.