CVE-2023-4659

The CVE-2023-4659 CSRF issue affects Free5GC, where an attacker can impersonate an administrator and perform POST/GET/DELETE actions without a token. Affected: Free5GC components exposing admin-level actions via CSRF with token value manipulations (e.g., setting token to 'admin'); impact: unprivi...

CVE-2026-40246

CVE-2026-40246 affects free5GC UDR (versions ≤ 1.4.2). The Delete handler for Traffic Influence Subscriptions validates influenceId ≠ subs-to-notify, returns 404, but does not stop execution, so the subsequent delete procedure runs and user-supplied subscription IDs can be deleted unauthenticated...