VYPR
← All advisories
Medium severity5.3NVD Advisory· Published May 9, 2026· Updated May 13, 2026

CVE-2026-8186

CVE-2026-8186

Description

A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in the library lib/sbi/client.c of the component NF. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. The patch is named d5bc487fcf9ea87d2b03f2ef95123af344773bfb. It is suggested to install a patch to address this issue.

Affected products

1

Patches

2
d5bc487fcf9e

sbi: prevent NF crash on callback URI without path component

https://github.com/open5gs/open5gsNoah StattonApr 26, 2026via nvd-ref
commit
1 file changed · +5 −0
  • lib/sbi/client.c+5 −0 modified
    @@ -834,6 +834,11 @@ bool ogs_sbi_client_send_via_scp_or_sepp(
         ogs_assert(apiroot);
 
         rc = ogs_sbi_getpath_from_uri(&path, request->h.uri);
+        if (rc == false) {
+            ogs_error("Cannot extract path from URI [%s]", request->h.uri);
+            ogs_free(apiroot);
+            return false;
+        }
         ogs_assert(path);
 
         request->h.uri = ogs_msprintf("%s/%s", apiroot, path);
b299356c8356

sbi: prevent NF crash on callback URI without path component

https://github.com/open5gs/open5gsNoah StattonApr 26, 2026via nvd-ref
commitPR #4496
1 file changed · +5 −0
  • lib/sbi/client.c+5 −0 modified
    @@ -834,6 +834,11 @@ bool ogs_sbi_client_send_via_scp_or_sepp(
         ogs_assert(apiroot);
 
         rc = ogs_sbi_getpath_from_uri(&path, request->h.uri);
+        if (rc == false) {
+            ogs_error("Cannot extract path from URI [%s]", request->h.uri);
+            ogs_free(apiroot);
+            return false;
+        }
         ogs_assert(path);
 
         request->h.uri = ogs_msprintf("%s/%s", apiroot, path);

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.