CVE-2026-8291CWE-404

Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service

Medium · published May 11, 2026

CVSS v4.0
5.3
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

A weakness has been identified in Open5GS up to 2.7.7. Impacted is the function ogs_nnrf_nfm_handle_nf_profile of the file lib/sbi/nnrf-handler.c of the component NRF. This manipulation causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00686 · 52.1th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2026-05-11T13:30Z
EPSS history
Timeline
  • 11 MAY 13:30Z
    Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service
    cvelistv5