Is there a public PoC exploit available for EUVD-2026-28476?

Yes, a public proof-of-concept exploit is available for EUVD-2026-28476. Prioritise patching immediately. EPSS: 0.0%.

Open5GS EUVD-2026-28476

Q: What is the CVSS score of EUVD-2026-28476?

EUVD-2026-28476 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-8119 LOW

Improper Resource Shutdown or Release (CWE-404)

2026-05-08 VulDB

GHSA-w88m-grx2-xwvr

Denial Of Service Open5gs

1.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

May 08, 2026 - 01:30 vuln.today

CVSS changed

May 08, 2026 - 01:22 NVD

3.3 (LOW) 1.9 (LOW)

CVE Published

May 08, 2026 - 00:00 nvd

LOW 1.9

DescriptionCVE.org

A vulnerability was detected in Open5GS up to 2.7.7. Impacted is the function ogs_sbi_stream_find_by_id in the library /lib/sbi/nghttp2-server.c of the component NSSF. Performing a manipulation results in denial of service. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service in Open5GS up to version 2.7.7 affects the NSSF component's stream identification function in the nghttp2-server library. Local authenticated attackers can manipulate the ogs_sbi_stream_find_by_id function to cause service unavailability. Publicly available exploit code exists, though the vendor has not yet responded to early disclosure notification.

Technical ContextAI

Open5GS is an open-source implementation of 5G network core components. The vulnerability exists in /lib/sbi/nghttp2-server.c, which implements the Service Based Interface (SBI) using the nghttp2 HTTP/2 library. The NSSF (Network Slice Selection Function) component relies on this library to manage SBI streams identified by the ogs_sbi_stream_find_by_id function. CWE-404 (Improper Resource Validation) indicates the underlying issue is insufficient validation of stream identifiers or resources when processing HTTP/2 stream lookup operations, allowing manipulation that exhausts or corrupts stream state.

RemediationAI

No vendor-released patch identified at time of analysis. The Open5GS project has not responded to early disclosure notification. Immediate remediation options are limited: upgrade to a version newer than 2.7.7 if available in your deployment pipeline, verify current version status in the upstream repository at https://github.com/open5gs/open5gs/. As compensating controls pending vendor response, implement network segmentation to restrict local access to NSSF components (e.g., container isolation, user privilege separation), monitor for unexpected stream failures or resource exhaustion in nghttp2-server logs, and consider running NSSF instances with process-level resource limits (ulimit, cgroup memory/CPU caps) to degrade gracefully under manipulation attempts rather than complete service loss. Note that these controls do not eliminate the vulnerability but reduce impact scope.