839 matches found
EUVD-2026-67105
An issue in the ModifyAMFEventSubscriptionProcedure function processor/eventexposure.go of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PATCH request...
EUVD-2026-67115
An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30067
A vulnerability in the complexQueryFilterSubprocess function within the NRF Discovery service of free5gc v4.0.1 allows an unauthenticated remote attacker to trigger a Denial of Service (DoS) via a crafted input. The CVSS 3.1 score is 7.5 (High) , with the attack vector being network-based, low co...
CVE-2026-30073
CVE-2026-30073 affects the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 , an open-source 5G core network implementation. An unauthenticated remote attacker can trigger a Denial of Service by sending a crafted POST request, resulting in high availability impact with no confident...
CVE-2026-30070
free5gc v4.0.1 is affected by a Denial of Service vulnerability in the HandleGetSharedData function, which can be triggered by a crafted input. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network-based attack with low complexity , no privileges required , and no user interaction , resulting i...
CVE-2026-30070
An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30060
An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service DoS when parsing crafted SUCI data during UE registration...
CVE-2026-30057
free5gc v4.1.0 , an open-source 5G core network implementation, contains a Denial of Service (DoS) vulnerability in the CreateUEContext handler component. An unauthenticated remote attacker can supply a crafted request to trigger the DoS, as reflected by the CVSS 3.1 score of 7.5 (High) with a ne...
CVE-2026-30059
free5gc v4.0.1 , an open-source 5G Core implementation, contains a vulnerability in its NAS decoder component that allows a remote attacker to trigger a Denial of Service by sending a crafted Registration Request message. The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector requiring no ...
EUVD-2026-67116
Improper input validation in the HandleUpdate function /sbi/parameterprovision.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30068
free5gc v4.0.1 is affected by an improper input validation flaw in the HandleUpdate function located at /sbi/parameter_provision.go. An unauthenticated, remote attacker can cause a Denial of Service (DoS) by sending a crafted input to the vulnerable endpoint. The CVSS v3.1 score is 7.5 (HIGH) , r...
CVE-2026-30056
A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted NGAP messages during the initialization of a new RAN connection...
CVE-2026-30068
Improper input validation in the HandleUpdate function /sbi/parameterprovision.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2026-67118
An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30067
An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30072
A NULL pointer dereference in the CDR (Call Detail Record) processing path of free5gc v4.0.1 allows a remote, unauthenticated attacker to cause a Denial of Service by supplying a crafted payload. The vulnerability is scored CVSS 3.1: 7.5 (HIGH) with a network attack vector, low complexity, and no...
EUVD-2026-67107
A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted NGAP messages during the initialization of a new RAN connection...
EUVD-2026-67106
An issue in the CreateUEContextProcedure function /v1/ue-contexts/supi of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PUT request...