Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-33064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. Versions prior to 1.4.2 are vulnerable to procedure panic caused ...

8.7CVSS5.8AI score0.00313EPSS
Exploits1References2
CVE
CVE
added 2026/03/20 8:0 a.m.5 views

CVE-2026-33064

CVE-2026-33064 (Free5GC UDM) affects Free5GC prior to 1.4.2. A crafted POST to /sdm-subscriptions with path traversal and a large JSON payload can trigger a nil pointer dereference in DataChangeNotificationProcedure (notifier.go), causing the UDM service to panic and crash. Impact is disruption o...

8.7CVSS5.8AI score0.00313EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/24 12:18 a.m.3 views

CVE-2026-27642 free5GC has Improper Input Validation in UDM UEAU Service

free5gc UDM provides Unified Data Management UDM for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, remote attackers can inject control characters e.g., %00 into the supi parameter, triggering internal URL parsing errors net/url:...

8.7CVSS5.3AI score0.00034EPSS
Exploits1References4
OSV
OSV
added 2026/02/24 12:18 a.m.6 views

CVE-2026-27642 free5GC has Improper Input Validation in UDM UEAU Service

free5gc UDM provides Unified Data Management UDM for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, remote attackers can inject control characters e.g., %00 into the supi parameter, triggering internal URL parsing errors net/url:...

8.7CVSS5.5AI score0.00034EPSS
Exploits1References6
NVD
NVD
added 2026/02/24 12:16 a.m.3 views

CVE-2025-69251

free5gc UDM provides Unified Data Management UDM for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, remote attackers can inject control characters e.g., %00 into the ueId parameter, triggering internal URL parsing errors net/url:...

8.7CVSS0.00031EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.3 views

free5GC 代码问题漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC such as 1.4.1 and earlier contained code vulnerabilities. These vulnerabilities stemmed from null pointer dereferencing, which could allow remote unauthenticated attackers to trigger a service pan...

8.7CVSS5.9AI score0.00524EPSS
Exploits1References4
Rows per page
Query Builder