{"id":"CVE-2026-8744","summary":"Open5GS NRF context.c ogs_sbi_nf_service_add denial of service","details":"A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function ogs_sbi_subscription_data_add/ogs_sbi_nf_service_add in the library /lib/sbi/context.c of the component NRF. Executing a manipulation can lead to denial of service. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This patch is called 819db11a08b9736a3576c4f99ceb28f7eb99523a. A patch should be applied to remediate this issue.","modified":"2026-08-07T17:31:29.942714Z","published":"2026-05-17T09:15:11.820Z","database_specific":{"cwe_ids":["CWE-404"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8744.json","unresolved_ranges":[{"extracted_events":[{"introduced":"2.7.3"},{"last_affected":"2.7.3"},{"introduced":"2.7.4"},{"last_affected":"2.7.4"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"VulDB"},"references":[{"type":"WEB","url":"https://github.com/open5gs/open5gs/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8744.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8744"},{"type":"ADVISORY","url":"https://vuldb.com/submit/817029"},{"type":"ADVISORY","url":"https://vuldb.com/submit/817030"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/364331"},{"type":"REPORT","url":"https://github.com/open5gs/open5gs/issues/4465"},{"type":"REPORT","url":"https://github.com/open5gs/open5gs/issues/4466"},{"type":"REPORT","url":"https://vuldb.com/vuln/364331/cti"},{"type":"FIX","url":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a"},{"type":"FIX","url":"https://github.com/open5gs/open5gs/pull/4534"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/open5gs/open5gs","events":[{"introduced":"0"},{"fixed":"819db11a08b9736a3576c4f99ceb28f7eb99523a"}],"database_specific":{"cpe":"cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.7.7"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["2.7.0","2.7.1","2.7.2","2.7.5","2.7.6","2.7.7","v2.7.7","v2.7.2","v2.7.1","v2.7.0","v2.6.6","v2.6.4","v2.6.3","v2.6.2","v2.6.1","v2.4.9","v2.4.8","v2.4.7","v2.4.5","v2.4.4","v2.4.3","v2.4.1","v2.4.0","v2.3.6","v2.3.2","v2.3.0","v2.2.9","v2.2.8","v2.2.7","v2.2.6","v2.2.1","v2.2.0","v2.1.7","v2.1.5","v2.1.4","v2.1.3","v2.1.1","v2.1.0","v2.0.22","v2.0.18","v2.0.0","v1.3.0","v1.2.4","v1.2.3","v1.2.2","v1.2.1","v1.2.0","v1.1.0","v1.0.0","v0.5.2","v0.5.1","v0.5.0","v0.4.4","v0.4.3","v0.4.2","v0.4.1","v0.3.10","v0.3.8","v0.3.6","v0.3.5","v0.3.4","v0.3.3","v0.3.2","v0.3.1","v0.3.0","v0.2.0","v0.1.1","v0.1.0"],"database_specific":{"vanir_signatures":[{"id":"CVE-2026-8744-08318beb","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/context.c","function":"ogs_sbi_nf_service_build_default"},"deprecated":false,"digest":{"function_hash":"16249094058657869928627704596776646406","length":1539}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/nnrf-handler.c","function":"ogs_nnrf_disc_handle_nf_discover_search_result"},"deprecated":false,"digest":{"function_hash":"243378604045404242245256397597027460641","length":2019},"id":"CVE-2026-8744-1639f777"},{"target":{"file":"lib/sbi/nf-sm.c","function":"handle_nf_profile_retrieval"},"deprecated":false,"digest":{"function_hash":"55852407250448581573594681595584426154","length":889},"id":"CVE-2026-8744-3f834d75","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/nnrf-handler.c","function":"handle_amf_info"},"deprecated":false,"digest":{"function_hash":"211081452140044593269755886858428105488","length":2888},"id":"CVE-2026-8744-4731b049"},{"source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/context.c"},"deprecated":false,"digest":{"line_hashes":["195004843334035938599827684095294709702","32986485196351161993125824230191498775","180465752881698208745525815713922776340","59073933655563628493692680297740066046","275216638900446821370920166691190684865","3227592112400216116350624973850055218","203570157354694368284876120762825711308","126548474155115247108406031469798931252","255028879963792835650228060658762508534","96904239641916137416459481660243676874","289184540269630613700429801908829421484","301066861645820204128108625500018677806","291482095777518312299279973363292173495","82340465102483926058830067905818256621","189892618420582457459188898165385522755","2846107366847814324254189349839620337","190886874251121653182128791367098901618"],"threshold":0.9},"id":"CVE-2026-8744-55d478d3","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/context.c","function":"ogs_sbi_nf_service_add"},"deprecated":false,"digest":{"function_hash":"130732915825328541451493982260406245172","length":721},"id":"CVE-2026-8744-56f6efe4","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"203720090770166402390754114313501127693","length":4456},"id":"CVE-2026-8744-5cecd588","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/nnrf-handler.c","function":"ogs_nnrf_nfm_handle_nf_status_notify"}},{"deprecated":false,"digest":{"function_hash":"212477443043626481110569371253891287190","length":3749},"id":"CVE-2026-8744-60103e81","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/nnrf-handler.c","function":"handle_smf_info"}},{"signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"src/nrf/nnrf-handler.c","function":"handle_nf_discover_search_result"},"deprecated":false,"digest":{"length":1386,"function_hash":"300072881376746714442009717271741961106"},"id":"CVE-2026-8744-6a19d264","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"241705159585595043904089266840380598669","length":3186},"id":"CVE-2026-8744-780aa9a0","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"src/nrf/nf-sm.c","function":"nrf_nf_state_registered"}},{"source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/nnrf-handler.c"},"deprecated":false,"digest":{"line_hashes":["136417980895722485965005264618118993497","183389780877134361127434353570368677542","143302426466122204530880031466877458034","9780037818844246625643102462999512892","243218002673315616279767653155044040293","117838837928395332331690611439873957597","312121119891909500215245205898464979770","276513111735457810018050609648212257269","26437157836688268336317984744528555492","336928773302455374425088496874252674701","312121119891909500215245205898464979770","276513111735457810018050609648212257269","26437157836688268336317984744528555492","336928773302455374425088496874252674701","299010972128839662461896462351452068812","136021588923051091606196807219864966929","130704049202969967873285757619898353274","26824128055617919443196847261413511042","317575751181482534509005960896887367066","171760845354917266463711574587117258676","182276736988768913131063474598290119248","39060839631571327222752029912353675578","9416165531149569137068460891936854823","196390593257842070422378752662686442373","161130115626311612152694782872147543220","256478472986182262966984675747124273581","62919667803503029639846707018996676191","177890480514098227465285540209279655026","171667239614945888866676404814998456857","333730008590493779027651797453470424769","113365187157117862719356432679879273474","76056482175776657052405010670484217426","146360317498337544191937583817330903071","182414496346571534804493965999809362602","41490224060754583953292343182703514087","69413621985838217151017573987386699708","61805183286545158473179240845657970164","40055110186504323480370639968030549722","124964660701044959420720830491117525520","286776151836486734773392814440314417873","241531229805264709440855805790781786700","179174569152151472941728885121955229403","156089603344391558458974262852145534015","77329035843189518637030370699577128048","200285850327446643110299021199398479229","297957035793438755489276596534887313291","178812333840579109687341394491373464738","127535372175929425627654891418291819913","90713126515907055486095917548063926685","275118505684586266342793579486900328357","126959342263737151082145259536619773327","101561947818382655921736015873022259487","125758454714766891984076959006358301867","312599851460233258270467337544825368136","198122681658994532726456226777645686522","313635480087267470148451351995919973281","174130525574423998528529682804146867996","41177794685516474335773653708715699542","44959225136591623799924367545404654749","103931885453504789943103033284318707409","178430954191223865079362091534896219038","215002208474935737323516871975870048328","68264480737367567358726482554817687014","66411185260436460172975880869746868539","155665023825048584238023635717718546987","239373282630754544142129145407571566200","111701319700956095136140317198889577216","145962796439263192637135396124160831361","89777350875825529570192354360299987791","159375564947729693257365835894087177800","8270688685666372076703322964253872615","247548658433870690416878783227706972942","257280820328777598556648799460437163891","210953834831751180362116990839778609605","92868986274049031886606165980247835180","168034824864823864324166559724605032981","121766136047179135299234076959966625858","274239928506828839619307190923370258296","31307417449048725241688542982124929345","330368772908108741199305845407567098382","306400768785595008412800769551824561339","228455875884709027964056299916274407012","69998330842898441207043366895152715440","152289482780419815173254907787262680108","88699831482028815729945069655662415623","202521649987549299697718887493219544330","22446837623513121837757297810613885253","85555648249245244083989234327351309122","234947948957878910496554502121075193719","91595365246665180883436209393466333348","6845504244358366070230761058366519012","234485276831756609744352600469559717566","210647672981407426053937097484420558932","251285314283426009624061028124944916337","273789008036411872899419105498695845778","283331183301004647237411348390113230122"],"threshold":0.9},"id":"CVE-2026-8744-797b32d3","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"src/nrf/nnrf-handler.c","function":"nrf_nnrf_handle_nf_register"},"deprecated":false,"digest":{"function_hash":"259012752356083655099462543220046482642","length":4696},"id":"CVE-2026-8744-8951a192"},{"deprecated":false,"digest":{"function_hash":"103726013372991178385299459831076612760","length":330},"id":"CVE-2026-8744-8db7db7f","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/context.c","function":"ogs_sbi_nf_info_add"}},{"deprecated":false,"digest":{"function_hash":"229894396496191188031311057877145637880","length":2223},"id":"CVE-2026-8744-8ef3dc19","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/nnrf-handler.c","function":"handle_scp_info"}},{"deprecated":false,"digest":{"line_hashes":["42066897325621323416094796115708039310","319782337964161397701407550229040749556","42966638466029012730852328339440427003","36822392641853374661143714171281244781","4772314432854877402678626829608387130","82240320893155195716485447983153821531","46436923689508486780832861404561643071","215002208474935737323516871975870048328","68264480737367567358726482554817687014","66411185260436460172975880869746868539","155665023825048584238023635717718546987","327143698416781655413586517800726835128","200573017264049093163498849618927631496","78863321446217139451002228130775648385","22560901329283594480097494131375379316","270876356817014831135559354297894509975","245466325453363594975875583873019422417","301073503506534091917339401848890662492","88699831482028815729945069655662415623"],"threshold":0.9},"id":"CVE-2026-8744-a5ed9f00","signature_type":"Line","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"src/nrf/nnrf-handler.c"}},{"deprecated":false,"digest":{"line_hashes":["136632376320459027627880877392246830508","247944482562397436175749469046620896326","282587183718138825255003881966854303402","284253939418177085031353372047627601204","14895048335391587137876413941709498683"],"threshold":0.9},"id":"CVE-2026-8744-ac6a4aba","signature_type":"Line","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"src/nrf/nf-sm.c"}},{"id":"CVE-2026-8744-aeea78cf","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/nnrf-handler.c","function":"handle_sepp_info"},"deprecated":false,"digest":{"function_hash":"47208437367567932655104584813614478333","length":1105}},{"signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/nnrf-handler.c","function":"ogs_nnrf_nfm_handle_nf_profile"},"deprecated":false,"digest":{"function_hash":"26524487379150402158572601199942762536","length":5537},"id":"CVE-2026-8744-e20d04b8","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["221658608774130983043025211481787368111","11564928524384368410657563106591110979","59370657613647771002340822684776238770","133807047999922108110709287104624474031","215535129781290022415832219437645666364","333665404900140847642443508155568767515","256230068037772560988337741109541599356"]},"id":"CVE-2026-8744-ffb9cf59","signature_type":"Line","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/819db11a08b9736a3576c4f99ceb28f7eb99523a","target":{"file":"lib/sbi/nf-sm.c"},"deprecated":false}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-8744.json","vanir_signatures_modified":"2026-08-07T17:31:29Z"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}]}