CVE-2026-8288 — The Function Gsm_handle_pdu_session_modification_qos_flow_de Denial of Service

CVE-2026-8288 — The Function Gsm_handle_pdu_session_modification_qos_flow_de Denial of Service

CVE-2026-8288 — A vulnerability was determined in Open5GS up to 2.7.7. This affects the function gsm_handle_pdu_session_modification_qos_flow_descriptions of the file src/smf/gsm-handler.c of the component SMF. Executing a manipulation of the argument n1SmMsg can lead to denial of service. The attac

What This Means For You

  • If your environment is affected by CWE-404, review your exposure and prioritize patching based on your environment. Monitor vendor advisories for CVE-2026-8288 updates and patches.

Indicators of Compromise

IDTypeIndicator
CVE-2026-8288 vulnerability CVE-2026-8288
CWE-404 weakness CWE-404
🔎
Turn this CVE into SIEM detection coverage Generate detection rules for Splunk, Sentinel, QRadar & Elastic — straight from this vulnerability. Use /detect in the Intel Bot.
Open Intel Bot →
Source & Attribution
Source PlatformNVD
ChannelNational Vulnerability Database
PublishedMay 11, 2026 at 16:16 UTC

This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.

Believe this infringes your rights? Submit a takedown request.

Related coverage

CVE-2026-8290 — Open5GS Denial of Service

CVE-2026-8290 — A security flaw has been discovered in Open5GS up to 2.7.7. This issue affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the...

vulnerabilityCVEmedium-severitydenial-of-servicecwe-404
/SCW Vulnerability Desk /MEDIUM /4.3 /⚑ 2 IOCs /⚙ 2 Sigma

CVE-2026-8289 — Open5GS Denial of Service

CVE-2026-8289 — A vulnerability was identified in Open5GS up to 2.7.7. This vulnerability affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component SMF....

vulnerabilityCVEmedium-severitydenial-of-servicecwe-404
/SCW Vulnerability Desk /MEDIUM /4.3 /⚑ 2 IOCs /⚙ 2 Sigma

Cockpit CVE-2026-4802: Remote Command Execution via Unsanitized Logs

CVE-2026-4802 — A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized...

vulnerabilityCVEhigh-severitycwe-78
/SCW Vulnerability Desk /HIGH /8 /⚑ 3 IOCs /⚙ 3 Sigma