CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

251 matches found

Positive Technologies•added 2026/03/18 12:0 a.m.•9 views

PT-2026-26185

Name of the Vulnerable Software and Affected Versions free5GC versions prior to 1.4.2 free5GC version 4.0.1 Description free5GC is an open source 5G core network. A flaw exists in the AUSF component where an improper null check can lead to a denial of service. Specifically, the...

8.7CVSS5.9AI score0.00652EPSS

Exploits0References10

Snyk•added 2026/03/13 12:34 a.m.•5 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the processing of a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings. An attacker can cause the process to crash and disrupt...

7.5CVSS5.8AI score0.00185EPSS

Exploits0References2

Vulnrichment•added 2026/03/12 9:33 p.m.•2 views

CVE-2026-32319 Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

7.5CVSS5.8AI score0.00306EPSS

Exploits0References1

Github Security Blog•added 2026/03/12 8:33 p.m.•10 views

Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings

Summary Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings, resulting in a denial of service. Impact An attacker able to send crafted NGAP messages to Ella Core can crash the process,...

7.5CVSS5.8AI score0.00185EPSS

Exploits0References5Affected Software1

NVD•added 2026/02/24 12:16 a.m.•7 views

CVE-2025-69251

free5gc UDM provides Unified Data Management UDM for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, remote attackers can inject control characters e.g., %00 into the ueId parameter, triggering internal URL parsing errors net/url:...

8.7CVSS0.00462EPSS

Exploits1References4

Packet Storm News•added 2025/12/23 12:0 a.m.•6 views

Post-Quantum Cryptography in the 5G Core

In this work, the conventional cryptographic algorithms used in the 5G Core are replaced with post-quantum alternatives and the practical impact of this transition is evaluated. Using a simulation environment, we model the registration and deregistration of varying numbers of user equipments UEs...

Query Builder