Denial of Service in Open5GS UDR Component Affecting Multiple Versions
CVE-2026-7707

5.3MEDIUM

Key Information:

Vendor: Open5GS
Status: Open5gs
Vendor: CVE Published:; 3 May 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-7707?

A denial of service vulnerability exists in the UDR component of Open5GS versions up to 2.7.7. This vulnerability is found within the udr_nudr_dr_handle_subscription_context function in the file /src/udr/nudr-handler.c. An attacker can exploit this weakness by manipulating the argument 'pei', leading to disruptions in service. The exploit can be executed remotely, making it particularly concerning for network operators. Although the Open5GS project was alerted about this issue via an early report, they have not yet responded to the concerns raised. Given that the exploit is publicly known, users of the affected versions are advised to take immediate action to mitigate risks.

Affected Version(s)

Open5GS 2.7.0

Open5GS 2.7.1

Open5GS 2.7.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-7707 - Proof of Concept