CVE-2024-51179

CVE-2024-51179 : La inundación de paquetes manipulados por un atacante puede bloquear UPF/SMF en Open5gs Descripción de la vulnerabilidad Descripción: Un problema en Open5GS v.2.7.1 permite a un atacante remoto provocar una denegación de servicio a través de las funciones de red virtualizadas NFV...

SUSE CVE-2026-44321

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. The POST /upi/v1/upNodesLinks create-or-update handler accepts attacker-controlled JSON and passes it directly into...

PT-2026-39251

Name of the Vulnerable Software and Affected Versions free5GC versions prior to 4.2.2 Description The Session Management Function SMF in free5GC mounts the UPI management route group without inbound OAuth2 middleware, allowing unauthenticated access. The POST endpoint '/upi/v1/upNodesLinks' accep...