CVE-2026-1974

The CVE-2026-1974 issue affects Free5GC up to version 4.1.0, specifically the SMF component’s ResolveNodeIdToIp function in internal/sbi/processor/datapath.go. The vulnerability allows denial of service via remote exploitation, and a public exploit is available. Connected sources corroborate the ...

CVE-2026-1974: Improper Resource Shutdown or Release

A vulnerability was identified in Free5GC up to 4.1.0. This affects the function ResolveNodeIdToIp of the file internal/sbi/processor/datapath.go of the component SMF. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit is publicly available and...