857 matches found
Free5gc 3.2.1 - Information Disclosure
Free5gc 3.2.1 is susceptible to information disclosure. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-38870 info: name: Free5gc 3.2.1 - Information Disclosure author: For3stCo1d severity: high description: | Free5gc 3.2.1 ...
CVE-2026-94043
A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzerdeps/free5gc/NFs/amf/internal/gmm/handler.go of the component Gmm Handler. This manipulation causes race condition. The attack can be initiated remotely. Patch name:...
CVE-2026-94043
Free5GC (up to 4.2.3 ) contains a race condition in the Gmm Handler component, specifically in the file NFs/amf/internal/gmm/handler.go. The vulnerability is exploitable remotely with no authentication or user interaction required. CVSS 3.1 scoring places the base score at 5.3 (MEDIUM) , with imp...
CVE-2026-94043 Free5GC Gmm handler.go race condition
A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzerdeps/free5gc/NFs/amf/internal/gmm/handler.go of the component Gmm Handler. This manipulation causes race condition. The attack can be initiated remotely. Patch name:...
EUVD-2026-83769
A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzerdeps/free5gc/NFs/amf/internal/gmm/handler.go of the component Gmm Handler. This manipulation causes race condition. The attack can be initiated remotely. Patch name:...
CVE-2026-94043 Free5GC Gmm handler.go race condition
A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzerdeps/free5gc/NFs/amf/internal/gmm/handler.go of the component Gmm Handler. This manipulation causes race condition. The attack can be initiated remotely. Patch name:...
CVE-2025-29632
Автор: HanyiLuo, Yuqi Huo CVE-2025-29632 информация об уязвимости, охваченной CVE-2025-29632 Затронутые версии: 4.0.0 и предыдущие версии Когда free5gc обрабатывает InitialUEMessage, он проверяет только, является ли ссылка nASPDU равной nil т.е. является ли она нулевым указателем, но не проверяет...
CVE-2026-47780
free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and HandleQueryeesubscriptions in free5gc/udr internal/sbi/apidatarepository.go validate the ueId path value with a regular expression whose final .+ alternative accepts every...
CVE-2026-47780
free5GC UDR (Unified Data Repository, versions 4.2.3 and earlier) contains an improper input validation flaw in HandleCreateEeSubscriptions and HandleQueryeesubscriptions within internal/sbi/api_datarepository.go. The ueId validation regex includes a trailing |.+ alternative that accepts any non-...
CVE-2026-47780 free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistence
free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and HandleQueryeesubscriptions in free5gc/udr internal/sbi/apidatarepository.go validate the ueId path value with a regular expression whose final .+ alternative accepts every...
SUSE CVE-2026-55068
free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...
CVE-2026-75439
An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...
EUVD-2026-71771
An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...
CVE-2026-75439
A NULL Pointer Dereference in the UPF (User Plane Function) component of Free5GC v.4.2.2 allows a remote attacker to cause a denial of service . The SSVC assessment rates exploitation at PoC level, automatable , with partial technical impact. A fix is referenced via go-upf PR #97 , and additional...
CVE-2026-75439
An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...
GO-2026-6316 free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints in github.com/free5gc/free5gc
free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints in github.com/free5gc/free5gc...
The vulnerability of the NRF RegisterNFInstance handler of the 5G mobile communication network organization software free5GC allows a attacker to gain unauthorized access to protected information.
The vulnerability of the NRF RegisterNFInstance handler in the software for fifth-generation mobile communication networks 5G, free5GC, is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected informati...
Drishti: AI-Led Human-Directed Vulnerability Auditing for 5G Cores
Candidate generation for open-source vulnerabilities is no longer scarce. AI-assisted code review now produces defect candidates cheaply, and industry programs pair them with expert human triage. The remaining scarcity is validation and impact assessment, and the gap is largest in...
Improper Input Validation
github.com/free5gc/free5gc is vulnerable to improper input validation. The vulnerability is due to insufficient validation of NF Profile data, which allows an attacker with SBI access to submit malicious profiles containing attacker-controlled network-function endpoints, causing them to be...
CVE-2026-55784
creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l3ppgae27 2026-08-29 00:33:59+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mu6mwsa5mu2l 2026-08-29 00:35:08+00:00|...