๐Ÿ” CVE Alert

CVE-2026-8226

MEDIUM 5.3

Open5GS types.c ogs_pcc_rule_install_flow_from_media denial of service

CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
13th

A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CWE CWE-404
Vendor n/a
Product open5gs
Published May 10, 2026
Last Updated May 11, 2026
Stay Ahead of the Next One

Get instant alerts for n/a open5gs

Be the first to know when new medium vulnerabilities affecting n/a open5gs are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

n/a / Open5GS
2.7.0 2.7.1 2.7.2 2.7.3 2.7.4 2.7.5 2.7.6 2.7.7

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
vuldb.com: https://vuldb.com/vuln/362443 vuldb.com: https://vuldb.com/vuln/362443/cti vuldb.com: https://vuldb.com/submit/808445 github.com: https://github.com/open5gs/open5gs/issues/4441 github.com: https://github.com/open5gs/open5gs/

Credits

๐Ÿ” LinZiyu (VulDB User) VulDB CNA Team