848 matches found
CVE-2026-30068
free5gc v4.0.1 is affected by an improper input validation flaw in the HandleUpdate function located at /sbi/parameter_provision.go. An unauthenticated, remote attacker can cause a Denial of Service (DoS) by sending a crafted input to the vulnerable endpoint. The CVSS v3.1 score is 7.5 (HIGH) , r...
CVE-2026-30073
CVE-2026-30073 affects the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 , an open-source 5G core network implementation. An unauthenticated remote attacker can trigger a Denial of Service by sending a crafted POST request, resulting in high availability impact with no confident...
CVE-2026-30056
A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted NGAP messages during the initialization of a new RAN connection...
CVE-2026-30070
free5gc v4.0.1 is affected by a Denial of Service vulnerability in the HandleGetSharedData function, which can be triggered by a crafted input. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network-based attack with low complexity , no privileges required , and no user interaction , resulting i...
CVE-2026-30072
A NULL pointer dereference in the CDR (Call Detail Record) processing path of free5gc v4.0.1 allows a remote, unauthenticated attacker to cause a Denial of Service by supplying a crafted payload. The vulnerability is scored CVSS 3.1: 7.5 (HIGH) with a network attack vector, low complexity, and no...
EUVD-2026-67107
A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted NGAP messages during the initialization of a new RAN connection...
EUVD-2026-67106
An issue in the CreateUEContextProcedure function /v1/ue-contexts/supi of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PUT request...
EUVD-2026-67120
A NULL pointer dereference in the CDR processing path of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
CVE-2026-30069
A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
EUVD-2026-67112
An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...
EUVD-2026-67113
An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...
CVE-2026-30062
CVE-2026-30062 affects the NGAP handler in free5gc v4.0.1 , an open-source 5G Core implementation. An unauthenticated remote attacker can send a crafted NAS PDU to trigger a Denial of Service , with the CVSS 3.1 score of 7.5 (HIGH) reflecting a network attack vector requiring no privileges or use...
CVE-2026-30069
CVE-2026-30069 is a NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 , an open-source 5G core network implementation. An unauthenticated remote attacker can trigger a Denial of Service by supplying a crafted payload, leading to a crash without impacting confid...
EUVD-2026-67119
An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30063
An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...
EUVD-2026-67108
An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted request...
CVE-2026-30063
CVE-2026-30063 affects the NF Discovery endpoint of free5gc v4.0.1 , an open-source 5G Core implementation. An unauthenticated, remote attacker can trigger a Denial of Service by sending a crafted snssais query to this endpoint. The vulnerability is rated CVSS 7.5 (HIGH) with a vector of AV:N/AC:...
CVE-2026-30058
Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...