Is there a public PoC exploit available for EUVD-2026-28481?

Yes, a public proof-of-concept exploit is available for EUVD-2026-28481. Prioritise patching immediately. EPSS: 0.0%.

Open5GS EUVD-2026-28481

Q: What is the CVSS score of EUVD-2026-28481?

EUVD-2026-28481 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-8123 LOW

Improper Resource Shutdown or Release (CWE-404)

2026-05-08 VulDB

GHSA-fxh4-4qxc-cq82

Denial Of Service Open5gs

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

May 08, 2026 - 02:22 NVD

MEDIUM LOW

CVSS changed

May 08, 2026 - 02:22 NVD

4.3 (MEDIUM) 2.1 (LOW)

Analysis Generated

May 08, 2026 - 02:15 vuln.today

CVE Published

May 08, 2026 - 01:00 nvd

MEDIUM 4.3

DescriptionCVE.org

A vulnerability was determined in Open5GS up to 2.7.7. This impacts the function ogs_sbi_discovery_option_add_snssais in the library /lib/sbi/message.c of the component NSSF. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service in Open5GS up to version 2.7.7 affects the NSSF component's ogs_sbi_discovery_option_add_snssais function, allowing authenticated remote attackers to crash the service via a network request. The vulnerability has been publicly disclosed with exploit code available on GitHub, though the vendor has not yet responded to early notification.

Technical ContextAI

The vulnerability exists in the NSSF (Network Slice Selection Function) component of Open5GS, specifically in the message handling library at /lib/sbi/message.c. The flaw is classified as CWE-404 (Improper Resource Validation), indicating a failure to properly validate or handle resources during the SBI (Service Based Interface) discovery process when processing SNSSAI (Single Network Slice Selection Assistance Information) parameters. This affects the core 5G service function that handles network slice selection, a critical element of 5G service architecture.

RemediationAI

No vendor-released patch is currently available due to the vendor's lack of response to early notification. Users should monitor the Open5GS GitHub repository (https://github.com/open5gs/open5gs/) and issue tracker (https://github.com/open5gs/open5gs/issues/4436) for updates. As interim compensating controls, implement network-level access restrictions to limit authenticated users who can reach the NSSF service, deploy API gateway authentication enforcement to reduce credential exposure, and monitor NSSF service availability with automated alerting for abnormal crashes. Consider segmenting the NSSF component to dedicated infrastructure to minimize impact of denial-of-service events on other 5G core functions. If upgrading, advance to the latest development version once the issue is resolved, but validate thoroughly in non-production environments first.