CVE-2026-8744
- Source
- https://cve.org/CVERecord?id=CVE-2026-8744
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-8744.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-8744
- Published
- 2026-05-17T09:15:11.820Z
- Modified
- 2026-08-04T16:32:09.503288Z
- Severity
-
- 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
- Summary
- Open5GS NRF context.c ogs_sbi_nf_service_add denial of service
- Details
-
A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function ogssbisubscriptiondataadd/ogssbinfserviceadd in the library /lib/sbi/context.c of the component NRF. Executing a manipulation can lead to denial of service. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This patch is called 819db11a08b9736a3576c4f99ceb28f7eb99523a. A patch should be applied to remediate this issue.
- Database specific
{ "cwe_ids": [ "CWE-404" ], "cna_assigner": "VulDB", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8744.json", "unresolved_ranges": [ { "source": "AFFECTED_FIELD", "extracted_events": [ { "introduced": "2.7.3" }, { "last_affected": "2.7.3" }, { "introduced": "2.7.4" }, { "last_affected": "2.7.4" } ] } ] }- References
-
- https://github.com/open5gs/open5gs/
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8744.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-8744
- https://vuldb.com/submit/817029
- https://vuldb.com/submit/817030
- https://vuldb.com/vuln/364331
- https://github.com/open5gs/open5gs/issues/4465
- https://github.com/open5gs/open5gs/issues/4466
- https://vuldb.com/vuln/364331/cti
- https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a
- https://github.com/open5gs/open5gs/pull/4534
Affected packages
Git / github.com/open5gs/open5gs
Affected ranges
- Type
- GIT
- Repo
- https://github.com/open5gs/open5gs
- Events
- Database specific
{ "source": [ "AFFECTED_FIELD", "REFERENCES" ], "extracted_events": [ { "introduced": "2.7.0" }, { "last_affected": "2.7.0" }, { "introduced": "2.7.1" }, { "last_affected": "2.7.1" }, { "introduced": "2.7.2" }, { "last_affected": "2.7.2" }, { "introduced": "2.7.5" }, { "last_affected": "2.7.5" }, { "introduced": "2.7.6" }, { "last_affected": "2.7.6" }, { "introduced": "2.7.7" }, { "last_affected": "2.7.7" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-8744.json"
vanir_signatures
[
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "16249094058657869928627704596776646406",
"length": 1539.0
},
"id": "CVE-2026-8744-08318beb",
"target": {
"function": "ogs_sbi_nf_service_build_default",
"file": "lib/sbi/context.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "243378604045404242245256397597027460641",
"length": 2019.0
},
"id": "CVE-2026-8744-1639f777",
"target": {
"function": "ogs_nnrf_disc_handle_nf_discover_search_result",
"file": "lib/sbi/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "55852407250448581573594681595584426154",
"length": 889.0
},
"id": "CVE-2026-8744-3f834d75",
"target": {
"function": "handle_nf_profile_retrieval",
"file": "lib/sbi/nf-sm.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "211081452140044593269755886858428105488",
"length": 2888.0
},
"id": "CVE-2026-8744-4731b049",
"target": {
"function": "handle_amf_info",
"file": "lib/sbi/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"195004843334035938599827684095294709702",
"32986485196351161993125824230191498775",
"180465752881698208745525815713922776340",
"59073933655563628493692680297740066046",
"275216638900446821370920166691190684865",
"3227592112400216116350624973850055218",
"203570157354694368284876120762825711308",
"126548474155115247108406031469798931252",
"255028879963792835650228060658762508534",
"96904239641916137416459481660243676874",
"289184540269630613700429801908829421484",
"301066861645820204128108625500018677806",
"291482095777518312299279973363292173495",
"82340465102483926058830067905818256621",
"189892618420582457459188898165385522755",
"2846107366847814324254189349839620337",
"190886874251121653182128791367098901618"
],
"threshold": 0.9
},
"id": "CVE-2026-8744-55d478d3",
"target": {
"file": "lib/sbi/context.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "130732915825328541451493982260406245172",
"length": 721.0
},
"id": "CVE-2026-8744-56f6efe4",
"target": {
"function": "ogs_sbi_nf_service_add",
"file": "lib/sbi/context.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "203720090770166402390754114313501127693",
"length": 4456.0
},
"id": "CVE-2026-8744-5cecd588",
"target": {
"function": "ogs_nnrf_nfm_handle_nf_status_notify",
"file": "lib/sbi/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "212477443043626481110569371253891287190",
"length": 3749.0
},
"id": "CVE-2026-8744-60103e81",
"target": {
"function": "handle_smf_info",
"file": "lib/sbi/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "300072881376746714442009717271741961106",
"length": 1386.0
},
"id": "CVE-2026-8744-6a19d264",
"target": {
"function": "handle_nf_discover_search_result",
"file": "src/nrf/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "241705159585595043904089266840380598669",
"length": 3186.0
},
"id": "CVE-2026-8744-780aa9a0",
"target": {
"function": "nrf_nf_state_registered",
"file": "src/nrf/nf-sm.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"136417980895722485965005264618118993497",
"183389780877134361127434353570368677542",
"143302426466122204530880031466877458034",
"9780037818844246625643102462999512892",
"243218002673315616279767653155044040293",
"117838837928395332331690611439873957597",
"312121119891909500215245205898464979770",
"276513111735457810018050609648212257269",
"26437157836688268336317984744528555492",
"336928773302455374425088496874252674701",
"312121119891909500215245205898464979770",
"276513111735457810018050609648212257269",
"26437157836688268336317984744528555492",
"336928773302455374425088496874252674701",
"299010972128839662461896462351452068812",
"136021588923051091606196807219864966929",
"130704049202969967873285757619898353274",
"26824128055617919443196847261413511042",
"317575751181482534509005960896887367066",
"171760845354917266463711574587117258676",
"182276736988768913131063474598290119248",
"39060839631571327222752029912353675578",
"9416165531149569137068460891936854823",
"196390593257842070422378752662686442373",
"161130115626311612152694782872147543220",
"256478472986182262966984675747124273581",
"62919667803503029639846707018996676191",
"177890480514098227465285540209279655026",
"171667239614945888866676404814998456857",
"333730008590493779027651797453470424769",
"113365187157117862719356432679879273474",
"76056482175776657052405010670484217426",
"146360317498337544191937583817330903071",
"182414496346571534804493965999809362602",
"41490224060754583953292343182703514087",
"69413621985838217151017573987386699708",
"61805183286545158473179240845657970164",
"40055110186504323480370639968030549722",
"124964660701044959420720830491117525520",
"286776151836486734773392814440314417873",
"241531229805264709440855805790781786700",
"179174569152151472941728885121955229403",
"156089603344391558458974262852145534015",
"77329035843189518637030370699577128048",
"200285850327446643110299021199398479229",
"297957035793438755489276596534887313291",
"178812333840579109687341394491373464738",
"127535372175929425627654891418291819913",
"90713126515907055486095917548063926685",
"275118505684586266342793579486900328357",
"126959342263737151082145259536619773327",
"101561947818382655921736015873022259487",
"125758454714766891984076959006358301867",
"312599851460233258270467337544825368136",
"198122681658994532726456226777645686522",
"313635480087267470148451351995919973281",
"174130525574423998528529682804146867996",
"41177794685516474335773653708715699542",
"44959225136591623799924367545404654749",
"103931885453504789943103033284318707409",
"178430954191223865079362091534896219038",
"215002208474935737323516871975870048328",
"68264480737367567358726482554817687014",
"66411185260436460172975880869746868539",
"155665023825048584238023635717718546987",
"239373282630754544142129145407571566200",
"111701319700956095136140317198889577216",
"145962796439263192637135396124160831361",
"89777350875825529570192354360299987791",
"159375564947729693257365835894087177800",
"8270688685666372076703322964253872615",
"247548658433870690416878783227706972942",
"257280820328777598556648799460437163891",
"210953834831751180362116990839778609605",
"92868986274049031886606165980247835180",
"168034824864823864324166559724605032981",
"121766136047179135299234076959966625858",
"274239928506828839619307190923370258296",
"31307417449048725241688542982124929345",
"330368772908108741199305845407567098382",
"306400768785595008412800769551824561339",
"228455875884709027964056299916274407012",
"69998330842898441207043366895152715440",
"152289482780419815173254907787262680108",
"88699831482028815729945069655662415623",
"202521649987549299697718887493219544330",
"22446837623513121837757297810613885253",
"85555648249245244083989234327351309122",
"234947948957878910496554502121075193719",
"91595365246665180883436209393466333348",
"6845504244358366070230761058366519012",
"234485276831756609744352600469559717566",
"210647672981407426053937097484420558932",
"251285314283426009624061028124944916337",
"273789008036411872899419105498695845778",
"283331183301004647237411348390113230122"
],
"threshold": 0.9
},
"id": "CVE-2026-8744-797b32d3",
"target": {
"file": "lib/sbi/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "259012752356083655099462543220046482642",
"length": 4696.0
},
"id": "CVE-2026-8744-8951a192",
"target": {
"function": "nrf_nnrf_handle_nf_register",
"file": "src/nrf/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "103726013372991178385299459831076612760",
"length": 330.0
},
"id": "CVE-2026-8744-8db7db7f",
"target": {
"function": "ogs_sbi_nf_info_add",
"file": "lib/sbi/context.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "229894396496191188031311057877145637880",
"length": 2223.0
},
"id": "CVE-2026-8744-8ef3dc19",
"target": {
"function": "handle_scp_info",
"file": "lib/sbi/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"42066897325621323416094796115708039310",
"319782337964161397701407550229040749556",
"42966638466029012730852328339440427003",
"36822392641853374661143714171281244781",
"4772314432854877402678626829608387130",
"82240320893155195716485447983153821531",
"46436923689508486780832861404561643071",
"215002208474935737323516871975870048328",
"68264480737367567358726482554817687014",
"66411185260436460172975880869746868539",
"155665023825048584238023635717718546987",
"327143698416781655413586517800726835128",
"200573017264049093163498849618927631496",
"78863321446217139451002228130775648385",
"22560901329283594480097494131375379316",
"270876356817014831135559354297894509975",
"245466325453363594975875583873019422417",
"301073503506534091917339401848890662492",
"88699831482028815729945069655662415623"
],
"threshold": 0.9
},
"id": "CVE-2026-8744-a5ed9f00",
"target": {
"file": "src/nrf/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"136632376320459027627880877392246830508",
"247944482562397436175749469046620896326",
"282587183718138825255003881966854303402",
"284253939418177085031353372047627601204",
"14895048335391587137876413941709498683"
],
"threshold": 0.9
},
"id": "CVE-2026-8744-ac6a4aba",
"target": {
"file": "src/nrf/nf-sm.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "47208437367567932655104584813614478333",
"length": 1105.0
},
"id": "CVE-2026-8744-aeea78cf",
"target": {
"function": "handle_sepp_info",
"file": "lib/sbi/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "26524487379150402158572601199942762536",
"length": 5537.0
},
"id": "CVE-2026-8744-e20d04b8",
"target": {
"function": "ogs_nnrf_nfm_handle_nf_profile",
"file": "lib/sbi/nnrf-handler.c"
},
"deprecated": false
},
{
"source": "https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"221658608774130983043025211481787368111",
"11564928524384368410657563106591110979",
"59370657613647771002340822684776238770",
"133807047999922108110709287104624474031",
"215535129781290022415832219437645666364",
"333665404900140847642443508155568767515",
"256230068037772560988337741109541599356"
],
"threshold": 0.9
},
"id": "CVE-2026-8744-ffb9cf59",
"target": {
"file": "lib/sbi/nf-sm.c"
},
"deprecated": false
}
]
vanir_signatures_modified
"2026-08-04T16:32:09Z"