Denial of Service Vulnerability in Open5GS NRF Component
CVE-2026-8731

5.3MEDIUM

Key Information:

Vendor: Open5GS
Status: Open5gs
Vendor: CVE Published:; 17 May 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-8731?

A denial of service vulnerability exists in Open5GS versions up to 2.7.7 within the NRF component's client function. By manipulating the client_pool argument within the ogs_sbi_client_add function in the library /lib/sbi/client.c, an attacker can exploit this vulnerability remotely to disrupt client operations. Although the issue has been reported to the Open5GS project, a resolution has not yet been publicly provided. It is crucial for users to prioritize patches and follow security advisories to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Open5GS 2.7.0

Open5GS 2.7.1

Open5GS 2.7.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-8731 - Proof of Concept