CVE-2026-47780

free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and HandleQueryeesubscriptions in free5gc/udr internal/sbi/apidatarepository.go validate the ueId path value with a regular expression whose final .+ alternative accepts every...

CVE-2026-47780

free5GC UDR (Unified Data Repository, versions 4.2.3 and earlier) contains an improper input validation flaw in HandleCreateEeSubscriptions and HandleQueryeesubscriptions within internal/sbi/api_datarepository.go. The ueId validation regex includes a trailing |.+ alternative that accepts any non-...