CVE-2026-8745: OPEN5GS

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability was identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function ogs_timer_add in the library /src/ausf/nausf-handler.c of the component AUSF. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

• OPEN5GS OPEN5GS: up to and including 2.7.7

Published 2026-05-17. Last modified 2026-06-17.