CVE-2026-8223 | Open5GS up to 2.7.7 sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of service (Issue 4438)

A vulnerability was found in Open5GS up to 2.7.7. It has been rated as problematic. Affected by this vulnerability is the function pcf_sess_sbi_discover_and_send of the component sm-policies Endpoint. Performing a manipulation results in denial of service.

This vulnerability is cataloged as CVE-2026-8223. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.