free5gc vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202657

Newest CVEs

• CVE-2026-47780

  free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistence

  free5gc · free5gc

  Medium6.9
• CVE-2026-55785

  free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

  free5gc · free5gc

  Low3.7
• CVE-2026-55784

  free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

  free5gc · free5gc

  High7.5
• CVE-2026-55068

  free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

  free5gc · free5gc

  Critical9.3
• CVE-2026-53551

  free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure

  free5gc · free5gc

  Medium6.9
• CVE-2026-42081

  free5GC: UE Security Capability bypass on NGAP PathSwitchRequest

  free5gc · free5gc

  Medium6.1
• CVE-2026-42082

  free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover

  free5gc · free5gc

  Low3.7
• CVE-2026-42083

  free5GC: PCF Npcf_SMPolicyControl missing authentication middleware allows unauthenticated access to SM policy handlers and disclosure of subscriber SUPI

  free5gc · free5gc

  High8.2
• CVE-2026-42459

  free5GC: Improper Input Validation and Generation of Error Message Containing Sensitive Information in github.com/free5gc/udm

  free5gc · free5gc

  High7.7
• CVE-2026-44315

  free5GC: NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions

  free5gc · free5gc

  Critical9.4