Is there a public PoC exploit available for EUVD-2026-30681?

Yes, a public proof-of-concept exploit is available for EUVD-2026-30681. Prioritise patching immediately. EPSS: 0.0%.

Open5GS EUVD-2026-30681

Q: What is the CVSS score of EUVD-2026-30681?

EUVD-2026-30681 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-8730 LOW

Improper Resource Shutdown or Release (CWE-404)

2026-05-17 VulDB

GHSA-8hvv-fjpf-3cxr

Denial Of Service Open5gs

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

May 17, 2026 - 05:22 NVD

MEDIUM LOW

CVSS changed

May 17, 2026 - 05:22 NVD

4.3 (MEDIUM) 2.1 (LOW)

Analysis Generated

May 17, 2026 - 05:13 vuln.today

DescriptionCVE.org

A flaw has been found in Open5GS up to 2.7.6. This impacts the function ogs_sbi_nf_instance_set_id in the library /lib/sbi/context.c of the component NRF. Executing a manipulation of the argument nfInstanceId can lead to denial of service. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Denial of service in Open5GS versions up to 2.7.6 allows authenticated remote attackers to crash the Network Repository Function (NRF) component via crafted nfInstanceId parameter manipulation in the ogs_sbi_nf_instance_set_id function. Publicly available exploit code exists (GitHub issue #4462), but vendor has not responded to early responsible disclosure. EPSS data not available, not listed in CISA KEV. CVSS 4.3 (Medium) reflects low impact (availability only) and authenticated attack vector.

Technical ContextAI

Open5GS is an open-source implementation of 5G Core and Evolved Packet Core (EPC) network functions. The vulnerability affects the Service Based Interface (SBI) context handling in the Network Repository Function (NRF), specifically the ogs_sbi_nf_instance_set_id function in /lib/sbi/context.c. The flaw is categorized as CWE-404 (Improper Resource Shutdown or Release), indicating the function fails to properly validate or handle malformed nfInstanceId arguments, leading to resource exhaustion or crash. The NRF manages network function instances and their discovery in 5G service-based architecture, making this component critical for network operations. The SBI context library handles registration and management of network function instances, and improper input validation allows authenticated attackers to trigger denial of service conditions.

RemediationAI

No vendor-released patch identified at time of analysis, as Open5GS maintainers have not responded to the disclosure per VulDB report. Monitor the official GitHub repository (https://github.com/open5gs/open5gs/) and issue #4462 for potential fixes in post-2.7.6 releases. Implement compensating controls immediately: restrict network access to the NRF SBI interface to only authorized network functions using firewall rules or network segmentation, reducing exposure to authenticated attackers. Enforce strong authentication and regularly rotate credentials for all network functions with NRF access to limit credential compromise risk. Deploy monitoring for abnormal NRF restart events or resource consumption patterns that may indicate exploitation attempts. Review and harden access control policies to ensure principle of least privilege for NRF management interfaces. Consider deploying NRF instances in high-availability configuration to maintain service during potential DoS attacks, though this increases infrastructure cost and complexity. Evaluate alternative 5G core implementations if vendor responsiveness is critical for your security posture. All mitigations are defense-in-depth measures since the underlying code vulnerability remains unpatched.