Open5Gs · Open5Gs · CVE-2026-8122
**Name of the Vulnerable Software and Affected Versions**
Open5GS versions prior to 2.7.8
**Description**
A remote denial of service issue exists in the NSSF component. The flaw is located in the `ogs sbi discovery option add service names()` function within the `/lib/sbi/message.c` library, where specific manipulation can cause the system to crash or become unavailable.
**Recommendations**
As a temporary workaround, restrict access to the NSSF component or the `ogs sbi discovery option add service names()` function to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.