Is there a public PoC exploit available for EUVD-2026-29026?

Yes, a public proof-of-concept exploit is available for EUVD-2026-29026. Prioritise patching immediately. EPSS: 0.0%.

Open5GS EUVD-2026-29026

Q: What is the CVSS score of EUVD-2026-29026?

EUVD-2026-29026 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-8269 LOW

Improper Resource Shutdown or Release (CWE-404)

2026-05-11 VulDB

GHSA-v736-85vc-hqf4

Denial Of Service Open5gs

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

May 11, 2026 - 05:30 vuln.today

Severity Changed

May 11, 2026 - 05:22 NVD

MEDIUM LOW

CVSS changed

May 11, 2026 - 05:22 NVD

4.3 (MEDIUM) 2.1 (LOW)

CVE Published

May 11, 2026 - 03:30 nvd

LOW 2.1

DescriptionCVE.org

A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function smf_nsmf_handle_create_sm_context of the component SMF. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service vulnerability in Open5GS up to version 2.7.7 affects the SMF (Session Management Function) component's smf_nsmf_handle_create_sm_context function, allowing authenticated remote attackers to crash or degrade the 5G core network service through malformed session context creation requests. Public exploit code exists and the vulnerability has low real-world severity (CVSS 2.1) due to requirement for authenticated access and availability impact only, though active 5G infrastructure targeting remains a concern given the critical nature of SMF in telecom deployments.

Technical ContextAI

Open5GS is an open-source 5G core network implementation. The SMF (Session Management Function) is responsible for session and connectivity management in 5G networks, handling session context creation via the NSMF interface defined in 3GPP specifications. The vulnerability exists in the smf_nsmf_handle_create_sm_context function, which processes incoming session context creation requests. CWE-404 (Improper Resource Validation) indicates the root cause involves insufficient validation or bounds checking of input parameters or resources during session context manipulation, allowing an attacker to trigger denial of service conditions. The affected CPE indicates all versions up to 2.7.7 are impacted.

RemediationAI

Immediate action: upgrade Open5GS to version 2.7.8 or later if available from the project repository (https://github.com/open5gs/open5gs/). If a patched version is not yet released, implement network-level mitigations: restrict access to the NSMF interface (default port typically 8805 or as configured) to trusted peer 5G network functions only, implement strict input validation and rate limiting on session context creation requests at the SMF ingress, and enable monitoring for abnormal session creation patterns or resource consumption spikes. Disable SMF service temporarily in non-critical test environments if exploitation is detected. Side effect of access restriction: may impact federation with external 5G networks until vendor issues patch and infrastructure is reconfigured. Monitor https://github.com/open5gs/open5gs/issues/4450 for vendor response and patch release timeline.