Is there a public PoC exploit available for CVE-2026-8251?

Yes, a public proof-of-concept exploit is available for CVE-2026-8251. Prioritise patching immediately. EPSS: 0.0%.

Open5GS CVE-2026-8251

Q: What is the CVSS score of CVE-2026-8251?

CVE-2026-8251 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-29005 LOW

Improper Resource Shutdown or Release (CWE-404)

2026-05-10 VulDB

GHSA-f9qh-rwp4-48x6

Denial Of Service Open5gs

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

May 10, 2026 - 23:45 vuln.today

Severity Changed

May 10, 2026 - 23:22 NVD

MEDIUM LOW

CVSS changed

May 10, 2026 - 23:22 NVD

4.3 (MEDIUM) 2.1 (LOW)

CVE Published

May 10, 2026 - 23:00 nvd

LOW 2.1

DescriptionCVE.org

A vulnerability was found in Open5GS up to 2.7.7. This impacts the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service in Open5GS up to version 2.7.7 allows authenticated remote attackers to crash the Service Mobile Function (SMF) component via manipulation of the update_authorized_pcc_rule_and_qos function in the Policy and Charging Control (PCC) handler. The vulnerability has a CVSS score of 2.1 with low availability impact; publicly available exploit code exists, and the project maintainers have not yet responded to early disclosure.

Technical ContextAI

Open5GS is an open-source 5G core network implementation. The vulnerability exists in the SMF (Service Mobile Function) component, specifically in the /src/smf/npcf-handler.c file within the update_authorized_pcc_rule_and_qos function. This function handles Policy and Charging Control (PCC) rule processing and QoS parameter updates in the 5G network architecture. The root cause is classified as CWE-404 (Improper Resource Validation), indicating that the function fails to properly validate or manage resources during PCC rule updates, leading to a denial of service condition. The attack requires authenticated network access, suggesting the attacker must be authenticated to the 5G network or SMF service.

RemediationAI

Upgrade Open5GS to a version newer than 2.7.7 once it becomes available; check the official Open5GS GitHub repository (https://github.com/open5gs/open5gs/) for patched releases. If immediate patching is not possible, restrict authenticated access to the SMF component to trusted network entities only-implement network segmentation and access control lists (ACLs) to limit which users or systems can authenticate to the SMF service, thereby reducing the attack surface. Additionally, monitor SMF service logs for abnormal PCC rule update attempts and implement rate limiting on Policy and Charging Control requests if the deployment architecture supports it. These compensating controls reduce exploitation likelihood but do not eliminate the vulnerability; patching remains the definitive remediation once available.