{"affected":[{"product":"n/a","source":"CNA: mitre","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cveId":"CVE-2026-106806","cwes":[],"description":"A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeated crafted requests can cause persistent heap growth, exhaust process memory, and terminate the affected Open5GS network function, resulting in denial of service.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793641491954,"publishedAt":1793577600000,"references":[{"source":"CNA: mitre","tags":[],"url":"https://github.com/open5gs/open5gs/issues/4788"},{"source":"CNA: mitre","tags":[],"url":"https://github.com/open5gs/open5gs/commit/76f15375ead1b2db09193458e56640da0a86c255"},{"source":"CNA: mitre","tags":[],"url":"https://gist.github.com/hackeryounow/c923fad9de83011004bd7d078b817dc0"}],"remediation":[],"revision":"bda161c3961778d5ba6593efc04e3f71e567608e6d43862015de750623061479","sources":[{"modifiedAt":1793641491954,"name":"CNA: mitre","retrievedAt":1793642929254,"url":"https://www.cve.org/CVERecord?id=CVE-2026-106806"}],"ssvc":null,"status":"published","title":"CVE-2026-106806","updatedAt":1793642929254}