Skip to contentFree5gc vulnerabilities
Newest
- free5gc, free5gc udm +1 morefree5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server ErrorCVE-2026-33191Fix available8.7 High
- free5gc, free5gc udm +1 morefree5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions requestCVE-2026-33065Fix available6.9 Medium
- free5gc, free5gc udm +1 morefree5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer DereferenceCVE-2026-33064Fix available8.7 High
- free5gc ausf, free5gc +1 morefree5GC AUSF UE Authentication Panic on Nil SuciSupiMap Interface ConversionCVE-2026-33063Fix available8.7 High
- free5gc, free5gc nrf +1 morefree5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list ParameterCVE-2026-33062Fix available8.7 High
- free5gc chf, free5gc +1 morefree5GC CHF has Out-of-Bounds Slice Access that Leads to DoSCVE-2026-32937Fix available7.1 High
- free5gc udrfree5GC has improper error handling in NEF with information exposureCVE-2026-276436.6 Medium
- free5gc udmfree5GC has Improper Input Validation in UDM UEAU ServiceCVE-2026-276426.6 Medium
- free5gc smffree5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE CVE-2026-260256.6 Medium
- free5gc smffree5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE CVE-2026-260246.6 Medium
- free5gc smffree5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.DLDR is set but DownlinkDataReport IE is missingCVE-2026-255016.6 Medium
- free5gc udrfree5GC vulnerable to improper error handling in NEF with information exposureCVE-2025-692536.6 Medium
- free5gc udmfree5GC has Null Pointer Dereference in UDM, Leading to Service PanicCVE-2025-692526.6 Medium
- free5gc udmfree5GC has Improper Input Validation in UDM, Leading to Information ExposureCVE-2025-692516.6 Medium
- free5gc udmfree5GC has Improper Error Handling in UDM, Leading to Information ExposureCVE-2025-692506.6 Medium
- free5gc amffree5GC has Array Index Out of Bounds in AMF Leading to Denial of ServiceCVE-2025-692486.6 Medium
- free5gc go-upffree5GC has Heap Buffer Overflow in UPF Leading to Denial of ServiceCVE-2025-692472.7 Low
- free5gc go-upf, smf +1 morefree5GC hasProtocol Compliance Violation in UPF Leading to SMF Service DisruptionCVE-2025-692322.7 Low
- free5gc udrfree5GC UDR's NEF incorrectly returns 500 for missing PFD data (UDR 404) in Nnef_PfdManagement GET requestCVE-2025-692082.7 Low
- free5gcFree5GC PFCP UDP Endpoint denial of serviceCVE-2026-25256.9 Medium
- free5gcAn improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows...CVE-2025-701237.5 High
- free5gcA heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote...CVE-2025-701227.5 High
- free5gcAn array index out of bounds vulnerability in the AMF component of free5GC v4.0.1 allows remote...CVE-2025-701217.5 High
- free5gcFree5GC SMF SessionDeletionResponse null pointer dereferenceCVE-2026-19766.9 Medium
- free5gcFree5GC pfcp_reports.go identityTriggerType null pointer dereferenceCVE-2026-19756.9 Medium
- free5gcFree5GC SMF datapath.go ResolveNodeIdToIp denial of serviceCVE-2026-19746.9 Medium
- free5gcFree5GC SMF establishPfcpSession null pointer dereferenceCVE-2026-19736.9 Medium
- free5gc pcfFree5GC pcf smpolicy.go HandleCreateSmPolicyRequest null pointer dereferenceCVE-2026-17396.9 Medium
- free5gc, free5gc smf +1 moreFree5GC SMF PFCP UDP Endpoint pfcp_reports.go HandleReports denial of serviceCVE-2026-16846.9 Medium
- free5gc, free5gc smf +1 moreFree5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of serviceCVE-2026-16836.9 Medium
- free5gc, free5gc smf +1 moreFree5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereferenceCVE-2026-16826.9 Medium
- free5gc pcfNull pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in...CVE-2025-667207.5 High
- free5gc nrfFree5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF valueCVE-2025-66719Fix available9.1 Critical
- free5gcThe free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session...CVE-2025-655627.5 High
- free5gcAn issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a...CVE-2025-655617.5 High
- free5gcNSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POSTCVE-2025-60638Fix available7.5 High
- free5gcFree5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement APICVE-2025-60633Fix available6.5 Medium
- free5gcFree5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST APICVE-2025-60632Fix available6.5 Medium
- free5gcfree5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an...CVE-2025-636797.5 High
- free5gcFree5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile...CVE-2025-563947.5 High
- free5gcBuffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of...CVE-2025-29632Public exploit5.4 Medium
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF ManageNews.php cross site scriptingCVE-2025-2583Disputed5.1 Medium
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF ManageAttachments.php cross site scriptingCVE-2025-2582Disputed5.1 Medium
- free5gc udm, ubiquiti inc efg, ucg-max +9 more +11 moreAn Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured,...CVE-2025-230915.9 Medium
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF User Alert Read Status index.php resource injectionCVE-2024-74385.3 Medium
- free5gc smf, simplemachines simple machine forum, simple machines forum +2 moreSimpleMachines SMF Delete User index.php resource injectionCVE-2024-74375.3 Medium
- free5gcfree5GC AMF denial of service vulnerabilityCVE-2023-493917.5 High
- free5gcFree5gc allows a local attacker to cause a denial of service via the free5gc-compose componentCVE-2023-470255.5 Medium
- free5gcBuffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via...CVE-2023-473477.5 High
- free5gcfree5gc Buffer Overflow vulnerabilityCVE-2023-473457.5 High
- Show moreLoading…