PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-8250 Open5GS CVE debrief

A vulnerability was found in Open5GS up to 2.7.7 in the SMF component. The smf_n4_build_qos_flow_to_modify_list function in /src/smf/n4-build.c can be manipulated remotely to cause a denial of service. The project was informed but has not responded yet. This issue is related to the denial of service vulnerability in the SMF component of Open5GS. The vulnerability affects the SMF component of Open5GS, which is a critical component for managing QoS flows. The denial of service vulnerability can have significant impacts on the network's performance and reliability.

Vendor
Open5GS
Product
Open5GS
CVSS
LOW 2.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-10
Original CVE updated
2026-07-24
Advisory published
2026-05-10
Advisory updated
2026-07-24

Who should care

Users of Open5GS up to version 2.7.7 should be aware of this denial of service vulnerability in the SMF component. They should verify their installations and monitor for vendor patches or updates. Additionally, users should review their network configurations and ensure that they are not exposed to this vulnerability.

Technical summary

The vulnerability affects the smf_n4_build_qos_flow_to_modify_list function in /src/smf/n4-build.c of Open5GS up to 2.7.7. It allows for remote manipulation leading to denial of service. The exploit has been disclosed publicly. Users should verify their installations and monitor for patches. The vulnerability is caused by a flaw in the QoS flow modification list function, which can be exploited remotely to cause a denial of service.

Defensive priority

Medium priority due to low CVSS score of 2.1 and limited details on exploitability. However, given the critical nature of the SMF component, users should prioritize verifying their installations and monitoring for patches.

Recommended defensive actions

  • Inventory and verify Open5GS installations up to version 2.7.7
  • Monitor for and apply vendor patches or updates when available
  • Implement compensating controls to detect and prevent exploitation attempts
  • Review and verify Open5GS configurations for potential vulnerabilities
  • Track exceptions and retest remediated assets
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

Evidence is limited. Official CVE record and NVD detail provided. Vendor informed but no response yet. The vulnerability affects Open5GS up to 2.7.7. The smf_n4_build_qos_flow_to_modify_list function in /src/smf/n4-build.c can be manipulated remotely to cause a denial of service. Limited details on exploitability are available. Further verification is required to determine the full scope of the vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-8250 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-8250

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-8250 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-8250

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.