CVE-2026-8745: Open5GS AUSF nausf-handler.c ogs_timer_add denial of service
A vulnerability was identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function ogstimeradd in the library /src/ausf/nausf-handler.c of the component AUSF. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Open5GS AUSFfrom your environment.Uninstall the AUSF component (nausf-handler) from affected deployments if AUSF functionality is not required.
- Configuration
Disable the AUSF service or the nausf-handler module in Open5GS configuration/startup to prevent remote invocation of the vulnerable function.
Open5GS AUSF (nausf-handler) enabled = false - Compensating control
Restrict network access to the AUSF service using firewall rules, network segmentation, or ACLs so that only trusted management and core network hosts can reach the AUSF ports.
- Compensating control
Apply rate-limiting or request-filtering (WAF/IDS/IPS) in front of AUSF endpoints to mitigate remote denial-of-service attempts against ogs_timer_add.
- Operational
Monitor logs and network traffic for indicators of exploitation (public exploit exists). When a vendor fix or patch becomes available, apply it promptly to affected systems.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8745?
CVE-2026-8745 has been assessed as a high severity vulnerability due to its potential for denial of service attacks.
How do I fix CVE-2026-8745?
To fix CVE-2026-8745, upgrade Open5GS to version 2.7.8 or later where the vulnerability has been addressed.
What component is affected by CVE-2026-8745?
CVE-2026-8745 specifically affects the AUSF component of Open5GS.
What does the CVE-2026-8745 vulnerability exploit?
CVE-2026-8745 exploits the function ogs_timer_add in the ausf-handler.c file, leading to denial of service.
Is CVE-2026-8745 an issue in recent versions of Open5GS?
No, CVE-2026-8745 affects Open5GS versions up to and including 2.7.7; later versions are not vulnerable.