CVE-2026-8292: Open5GS NRF conv.c yuarel_parse denial of service
A security vulnerability has been detected in Open5GS up to 2.7.7. The affected element is the function yuarelparse in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argument hnrf-uri leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8292?
CVE-2026-8292 is classified as a denial of service vulnerability affecting the Open5GS NRF component.
How do I fix CVE-2026-8292?
To fix CVE-2026-8292, upgrade your Open5GS NRF to version 2.7.8 or later.
What components are affected by CVE-2026-8292?
CVE-2026-8292 affects the NRF component in Open5GS versions up to and including 2.7.7.
Can CVE-2026-8292 be exploited remotely?
Yes, CVE-2026-8292 can be exploited remotely by manipulating the hnrf-uri argument.
What is the impact of CVE-2026-8292?
The impact of CVE-2026-8292 is a denial of service which can disrupt the functionalities of the Open5GS NRF.