CVE-2026-8225

A vulnerability was identified in Open5GS up to 2.7.7. This affects the function pcf_npcf_smpolicycontrol_handle_delete of the file src/pcf/sm-sm.c of the component delete Endpoint. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-404

• https://github.com/open5gs/open5gs/Product
• https://github.com/open5gs/open5gs/issues/4440Exploit, Issue Tracking
• https://vuldb.com/submit/808444Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362442Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362442/ctiPermissions Required, VDB Entry

Published

May 10, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82244Budibase versions before 3.41.3 contain a remote code execut…9.1
• CVE-2026-82245Budibase before 3.41.3 fails to enforce role-based authoriza…8.1
• CVE-2026-82246Budibase Server before 3.41.3 contains a server-side request…7.1
• CVE-2026-82247gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a…7.5
• CVE-2026-82248gix-worktree-state before 0.33.0 (part of gitoxide) allows w…5.3
• CVE-2026-82249gitoxide before 0.38.2 fails to validate carriage return cha…3.1
• CVE-2026-82250gitoxide gix-packetline versions before 0.21.5 contain a pan…6.5
• CVE-2026-82251gitoxide before 0.52.1 fails to validate submodule names fro…7.5
• CVE-2026-82252gitoxide before 0.52.1 follows symlinks when reading the wor…7.5
• CVE-2026-82253gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10…7.5
• CVE-2026-82254gitoxide before 0.69.0 contains unchecked array indexing in …7.5
• CVE-2026-82255gitoxide versions from 0.25.4 contain an HTTP credential lea…6.8