Denial of Service Vulnerability in Open5GS PFCP Message Handler
CVE-2026-91855

6.9MEDIUM

Key Information:

Vendor: Open5GS
Status: Open5gs
Vendor: CVE Published:; 15 September 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-91855?

A security flaw in Open5GS affects the PFCP Message Handler component, specifically within the handler.c file. This vulnerability allows attackers to trigger a denial of service condition through remote manipulation. As the exploit has been made public, it poses a significant risk to systems running vulnerable versions of Open5GS up to 2.7.7. To mitigate this risk, it is crucial to apply the available patch (commit 028e1dbb5e3271035ccee906ef417a97fc523f71) to safeguard against potential attacks.

Affected Version(s)

Open5GS 2.7.0

Open5GS 2.7.1

Open5GS 2.7.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-91855 - Proof of Concept