CVE-2026-40248

CVE-2026-40248 affects free5GC UDR (versions 4.2.1 and earlier). The vulnerability stems from improper path validation: when influenceId != subs-to-notify, the handler returns 404 but does not stop, allowing unauthenticated SBI clients to create/modify Traffic Influence Subscriptions by supplying...

CVE-2026-40248

creationtimestamp| type| source ---|---|--- 2026-04-14 02:11:23+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-jgq2-qv8v-5cmj 2026-04-16 23:18:29+00:00| published-proof-of-concept| Telegram/uUtOgPMgnfpzQaGdgE5uvRP8Wc5QVkmzi4lAg5HL6Ws0-I 2026-04-17...