Is there a public PoC exploit available for CVE-2026-8290?

Yes, a public proof-of-concept exploit is available for CVE-2026-8290. Prioritise patching immediately. EPSS: 0.0%.

Open5GS CVE-2026-8290

Q: What is the CVSS score of CVE-2026-8290?

CVE-2026-8290 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-29053 LOW

Improper Resource Shutdown or Release (CWE-404)

2026-05-11 VulDB

GHSA-4c5m-7x4h-hr3w

Denial Of Service Open5gs

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

May 11, 2026 - 14:22 NVD

MEDIUM LOW

CVSS changed

May 11, 2026 - 14:22 NVD

4.3 (MEDIUM) 2.1 (LOW)

Analysis Generated

May 11, 2026 - 13:45 vuln.today

CVE Published

May 11, 2026 - 13:00 nvd

MEDIUM 4.3

DescriptionCVE.org

A security flaw has been discovered in Open5GS up to 2.7.7. This issue affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service in Open5GS through version 2.7.7 allows authenticated remote attackers to crash the Service Management Function (SMF) by manipulating the smf_nsmf_handle_update_data_in_vsmf function in nsmf-handler.c. Publicly available exploit code exists, and the project maintainers have not yet responded to the early disclosure notification despite awareness of the issue.

Technical ContextAI

Open5GS is an open-source 5G core network implementation. The vulnerability resides in the SMF (Service Management Function) component, specifically in the nsmf-handler.c file's update data handling routine. CWE-404 classifies this as an improper resource validation issue, suggesting the SMF fails to properly validate or constrain resources (such as message size, array bounds, or connection limits) when processing network slice management function (NSMF) update data requests. The remote attack vector indicates the flaw is reachable via network protocols used in 5G signaling (likely Nsmf service-based interface or similar N11 interface traffic).

RemediationAI

Upgrade Open5GS to a version newer than 2.7.7 if a patched release becomes available - check the official Open5GS repository and GitHub releases page regularly for updates. Until a patch is released, implement compensating controls: restrict network access to the SMF component via firewall rules to only authorized 5G network elements (AMF, other SMF instances, and NRF nodes); disable or isolate any untrusted or external SMF interfaces; monitor SMF process resource usage and implement automatic restart/alerting on abnormal CPU or memory spikes to detect denial-of-service attempts; apply strict rate-limiting or connection limits on Nsmf signaling interfaces; consider network segmentation to segregate the SMF from less-trusted network domains. These controls trade off some operational flexibility (stricter access policies, potential monitoring overhead) but significantly reduce the attack surface while a patch is pending.