CVE-2024-51179

CVE-2024-51179 : Flooding of Crafted packets from an Attacker can crash UPF/SMF in Open5gs Vulnerability Description Description: An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of servie via the Network Function Virtualizations NFVs such as the User Plane Function UPF and...

CVE-2026-106807

A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogspfcpxactremotecreate returns NULL, but the failure is not handled properly and leads to an ogsassertnew failure in ogspfcpxactreceive...

EUVD-2026-115347

A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogspfcpxactremotecreate returns NULL, but the failure is not handled properly and leads to an ogsassertnew failure in ogspfcpxactreceive...

PT-2026-135533

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

CVE-2026-106807

A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogspfcpxactremotecreate returns NULL, but the failure is not handled properly and leads to an ogsassertnew failure in ogspfcpxactreceive...

CVE-2026-108103

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsedroppeddltrafficthreshold that allows remote unauthenticated attackers to read past IE buffers via short IEs. Attackers can send PFCP Session Establishment or Modification Requests to the UPF on UDP port 8805 wi...

CVE-2026-107166

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166: Allocation of Resources Without Limits or Throttling

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

PT-2026-107570

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogs pfcp xact local create of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The...

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component . A NULL Pointer Dereference is identified as a related mechanism for this vulnerability. Specific exploit information or mitigation details are not provided in the documents.

EUVD-2026-71771

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

CVE-2026-75439: NULL Pointer Dereference

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

PT-2026-86249

Name of the Vulnerable Software and Affected Versions Free5GC version 4.2.2 Description A remote attacker can cause a denial of service in the UPF User Plane Function component, which is responsible for packet routing and forwarding in the 5G core network. Recommendations At the moment, there is ...