Is there a public PoC exploit available for EUVD-2026-26661?

Yes, a public proof-of-concept exploit is available for EUVD-2026-26661. Prioritise patching immediately. EPSS: 0.0%.

Open5GS EUVD-2026-26661

Q: What is the CVSS score of EUVD-2026-26661?

EUVD-2026-26661 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-7583 LOW

Improper Resource Shutdown or Release (CWE-404)

2026-05-01 VulDB

Denial Of Service Open5gs

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

May 01, 2026 - 16:00 vuln.today

PoC Detected

May 01, 2026 - 15:26 vuln.today

Public exploit code

Severity Changed

May 01, 2026 - 15:22 NVD

MEDIUM LOW

CVSS changed

May 01, 2026 - 15:22 NVD

4.3 (MEDIUM) 2.1 (LOW)

EUVD ID Assigned

May 01, 2026 - 15:00 euvd

EUVD-2026-26661

Analysis Generated

May 01, 2026 - 15:00 vuln.today

CVE Published

May 01, 2026 - 14:45 nvd

LOW 2.1

DescriptionCVE.org

A flaw has been found in Open5GS up to 2.7.7. This issue affects the function bsf_sess_find_by_ipv6prefix of the file /src/bsf/context.c of the component BSF. This manipulation of the argument ipv6Prefix causes denial of service. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service in Open5GS up to version 2.7.7 allows authenticated remote attackers to crash the BSF (Binding Support Function) component by manipulating the ipv6Prefix argument in the bsf_sess_find_by_ipv6prefix function. The vulnerability has a low CVSS score of 2.1 due to requiring authentication and causing only availability impact, but publicly available exploit code exists and the vendor has not yet responded to early disclosure.

Technical ContextAI

Open5GS is an open-source 5G and LTE core network implementation. The vulnerability resides in the BSF (Binding Support Function) component, specifically in the context.c file at the bsf_sess_find_by_ipv6prefix function. This function is responsible for locating BSF sessions by IPv6 prefix matching. The issue stems from improper validation or handling of the ipv6Prefix argument (CWE-404: Improper Resource Validation), which when manipulated with malformed or unexpected input, causes the function to enter an error state that crashes the BSF service. The BSF is a critical network function in the 5G Service Based Architecture responsible for managing binding information between UE identities and access network addresses.

RemediationAI

Upgrade Open5GS to a patched version newer than 2.7.7 once available from the project's GitHub repository at https://github.com/open5gs/open5gs/. The vendor has not yet released a fix despite early notification. As an interim compensating control, restrict network access to the BSF component to only trusted internal network segments and authenticated users by implementing firewall rules and mutual TLS authentication on BSF service endpoints. Additionally, disable BSF functionality if not actively required for your 5G deployment, or deploy BSF in an isolated network zone accessible only to trusted 5G core network functions. Monitor for any public updates at https://github.com/open5gs/open5gs/issues/4401 for patch release announcements. These controls trade operational flexibility and monitoring complexity for reduced exposure until an official patch is released.