EUVD-2026-67117

A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...

EUVD-2026-67115

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30064

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30059

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30071

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30050

An issue in the ModifyAMFEventSubscriptionProcedure function processor/eventexposure.go of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PATCH request...

CVE-2026-30060

free5gc v4.0.1 is affected by a Denial of Service vulnerability triggered when parsing crafted SUCI (Subscription Concealed Identifier) data during UE registration. The issue is tracked in the project's issue tracker (GitHub issue #769 ). The CVSS 3.1 score is 7.5 (HIGH) with a network attack vec...

CVE-2026-30056

A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 (an open-source 5G Core implementation) allows a remote attacker to trigger a Denial of Service by supplying crafted NGAP messages during the initialization of a new RAN connection. The vulnerability is rated CVSS 7...

CVE-2026-30050

free5gc v4.1.0 , an open-source 5G Core implementation, is affected by a Denial of Service vulnerability in the ModifyAMFEventSubscriptionProcedure function located in processor/event_exposure.go. An unauthenticated attacker can trigger the DoS by supplying a crafted PATCH request over the networ...

CVE-2026-30064

free5gc v4.0.1 is affected by an improper input validation flaw in the buildFilter function (file: processor/processor.go). An unauthenticated remote attacker can supply a crafted input to trigger a Denial of Service (DoS) . The vulnerability is scored CVSS 3.1: 7.5 (High) with a vector of AV:N/A...

CVE-2026-30071

CVE-2026-30071 affects the RechargePut function in free5gc v4.0.1 , a 5G core network implementation. A remote attacker can send a crafted input to trigger a Denial of Service (DoS) , with no authentication required and low attack complexity. The CVSS 3.1 score is 7.5 (HIGH) , reflecting high ava...

CVE-2026-30067

A vulnerability in the complexQueryFilterSubprocess function within the NRF Discovery service of free5gc v4.0.1 allows an unauthenticated remote attacker to trigger a Denial of Service (DoS) via a crafted input. The CVSS 3.1 score is 7.5 (High) , with the attack vector being network-based, low co...

CVE-2026-30058

CVE-2026-30058 affects free5gc v4.0.1 , an open-source 5G core implementation. The HTTPModifySubscription handler contains an Improper Input Validation flaw that allows a remote, unauthenticated attacker to trigger a Denial of Service by sending a crafted input. The vulnerability is scored CVSS 3...

EUVD-2026-67107

A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted NGAP messages during the initialization of a new RAN connection...

CVE-2026-30060

An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service DoS when parsing crafted SUCI data during UE registration...

CVE-2026-30067

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30070

An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30068

Improper input validation in the HandleUpdate function /sbi/parameterprovision.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30056

A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted NGAP messages during the initialization of a new RAN connection...

CVE-2026-30068

free5gc v4.0.1 is affected by an improper input validation flaw in the HandleUpdate function located at /sbi/parameter_provision.go. An unauthenticated, remote attacker can cause a Denial of Service (DoS) by sending a crafted input to the vulnerable endpoint. The CVSS v3.1 score is 7.5 (HIGH) , r...