Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2026-40249 free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors

🗓️ 16 Apr 2026 21:59:36Reported by GoogleType 
osv
 osv🔗 osv.dev👁 1 Views

CVE-2026-40249: free5GC Unified Data Repository PUT handler may fail open on input errors.

Related
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2026-40249
16 Apr 202621:59
–attackerkb
Circl		CVE-2026-40249
17 Apr 202600:51
–circl
CNNVD		free5GC 安全漏洞
16 Apr 202600:00
–cnnvd
CVE		CVE-2026-40249
16 Apr 202621:59
–cve
Cvelist		CVE-2026-40249 free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors
16 Apr 202621:59
–cvelist
Github Security Blog		free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors
14 Apr 202620:00
–github
NVD		CVE-2026-40249
16 Apr 202622:16
–nvd
OSV		GHSA-GX38-8H33-PMXR free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors
14 Apr 202620:00
–osv
OSV		GO-2026-5407 free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors in github.com/free5gc/udr
25 Jun 202622:34
–osv
Positive Technologies		PT-2026-32976
14 Apr 202600:00
–ptsecurity
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
08 Jul 2026 08:13Current
6.1Medium risk
Vulners AI Score6.1
CVSS 46.9
EPSS0.00321
free5GCUnified Data RepositoryPolicy Data SubscriptionsNotify SubscriptionsPut HandlerFail OpenInput ErrorsUnintended Updates
1