Is there a public PoC exploit available for CVE-2026-8226?

Yes, a public proof-of-concept exploit is available for CVE-2026-8226. Prioritise patching immediately. EPSS: 0.0%.

Open5GS CVE-2026-8226

Q: What is the CVSS score of CVE-2026-8226?

CVE-2026-8226 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-28974 MEDIUM

Improper Resource Shutdown or Release (CWE-404)

2026-05-10 VulDB

GHSA-5qq8-gchc-f3pv

Denial Of Service Open5gs

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

May 10, 2026 - 05:22 NVD

5.3 (MEDIUM) 5.5 (MEDIUM)

Analysis Generated

May 10, 2026 - 05:15 vuln.today

CVE Published

May 10, 2026 - 03:30 nvd

MEDIUM 5.3

DescriptionCVE.org

A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pcc_rule_install_flow_from_media in the library /lib/proto/types.c. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service vulnerability in Open5GS up to version 2.7.7 allows remote unauthenticated attackers to crash the service by triggering improper exception handling in the ogs_pcc_rule_install_flow_from_media function within the PCC rule processing library. Publicly available exploit code exists, and the project maintainers have not responded to the early notification despite issue tracking.

Technical ContextAI

Open5GS is an open-source 5G core network implementation. The vulnerability resides in the PCC (Policy and Charging Control) rule installation subsystem, specifically in the ogs_pcc_rule_install_flow_from_media function located in /lib/proto/types.c. This function processes media flow rules that define how user plane traffic should be handled within the 5G network. CWE-404 (Improper Resource Validation) indicates that the function fails to properly validate or handle exceptional conditions when installing flow rules, allowing attackers to supply malformed or unexpected input that causes the process to crash. The issue affects the core network function responsible for QoS and traffic management, making it network-facing and remotely exploitable with no authentication required.

RemediationAI

Upgrade Open5GS to a version newer than 2.7.7 once a patched release is available from the project maintainers. As of the time of analysis, no vendor-released patch has been confirmed, and the project has not responded to the early notification. Organizations unable to immediately upgrade should implement network-level mitigations: restrict access to Open5GS service ports to trusted interfaces only, deploy rate limiting on media flow rule installation requests to prevent rapid-fire DoS attempts, and monitor the GitHub issues page (https://github.com/open5gs/open5gs/issues/4441) for patch availability. If running in a virtualized environment, implement resource limits and automatic restart policies to minimize service disruption. These compensating controls do not eliminate the vulnerability but reduce exploitation window and impact severity.