Is there a public PoC exploit available for CVE-2026-7707?

Yes, a public proof-of-concept exploit is available for CVE-2026-7707. Prioritise patching immediately. EPSS: 0.1%.

Open5GS CVE-2026-7707

Q: What is the CVSS score of CVE-2026-7707?

CVE-2026-7707 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

LOW

Improper Resource Shutdown or Release (CWE-404)

2026-05-03 VulDB

Denial Of Service Open5gs

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

May 03, 2026 - 23:22 NVD

MEDIUM LOW

CVSS changed

May 03, 2026 - 23:22 NVD

4.3 (MEDIUM) 2.1 (LOW)

PoC Detected

May 03, 2026 - 23:16 vuln.today

Public exploit code

Analysis Generated

May 03, 2026 - 23:00 vuln.today

Analysis Generated

May 03, 2026 - 22:45 vuln.today

CVE Published

May 03, 2026 - 22:30 nvd

LOW 2.1

DescriptionCVE.org

A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The manipulation of the argument pei results in denial of service. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service in Open5GS UDR component (versions up to 2.7.7) via malformed pei argument in udr_nudr_dr_handle_subscription_context function allows authenticated remote attackers to crash the User Data Repository service with low complexity. Publicly available exploit code exists; vendor has not responded to early notification.

Technical ContextAI

Open5GS is an open-source implementation of 5G core network functions. The vulnerability resides in the UDR (User Data Repository) component, specifically in the nudr-handler.c file's udr_nudr_dr_handle_subscription_context function, which processes subscription context queries. The pei (Permanent Equipment Identifier) parameter validation is insufficient (CWE-404: Improper Resource Validation), allowing an attacker to supply a malformed value that triggers a denial of service condition. The UDR is a critical component in the 5G service architecture responsible for managing user subscription data; disruption directly impacts user connectivity and authentication flows.

RemediationAI

No vendor-released patch identified at time of analysis - the project has not responded to early notification. Immediate mitigations: (1) Restrict network access to the UDR component using firewall rules to only authorized 5G core network nodes, reducing attack surface from 'remote' to 'internal-only' - this eliminates external threat actors but does not protect against compromised internal nodes; (2) Implement rate limiting and input validation at the API gateway level for subscription context requests, specifically filtering malformed pei values - this adds complexity to the attack chain but does not guarantee protection if validation logic is similar to the vulnerable code; (3) Deploy UDR instances in a redundant, load-balanced configuration so that a crash of a single instance does not result in total service loss - this mitigates impact severity but not the underlying vulnerability; (4) Monitor UDR process logs and enable automatic restart via systemd or container orchestration to reduce downtime during exploitation; (5) Update to a patched version immediately once the vendor releases a fix; check GitHub repository (https://github.com/open5gs/open5gs/) and project issue tracker (https://github.com/open5gs/open5gs/issues/4410) for remediation updates.