Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Free5GC — Vulnerabilities & Security Advisories 43

All 43 CVE vulnerabilities found in Free5GC, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with Free5GC, an open-source 5G Core network implementation, focusing specifically on software weaknesses and their impacts. It collects reported flaws, primarily concerning memory corruption, authentication bypasses, and logic errors within the network functions, covering disclosures from the project's public release through current maintenance cycles. Readers can use this resource to track vendor advisories, understand the technical nature of specific weakness classes affecting core network components, and review the product's complete vulnerability history to assess cumulative risk. The data is organized to facilitate rapid identification of recurring issues, such as improper input validation or privilege escalation paths, enabling security teams to prioritize patching efforts based on severity and exploitability. By centralizing these records, the page serves as a reference for developers and operations personnel to monitor remediation status and verify fixes across different versions of the Free5GC software stack.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-40245 Free5GC: UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authentication CWE-200 7.5 High 2026-04-15
CVE-2026-5661 Free5GC NGSetupRequest denial of service CWE-404 5.3 Medium 2026-04-06
CVE-2026-5360 Free5GC aper type confusion CWE-843 3.7 Low 2026-04-02
CVE-2026-4531 Free5GC AMF handler.go HandleRegistrationComplete denial of service CWE-404 5.3 Medium 2026-03-22
CVE-2026-33192 free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques CWE-209 3.7 - 2026-03-20
CVE-2026-33065 free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request CWE-209 5.3 - 2026-03-20
CVE-2026-33064 free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference CWE-478 7.5 - 2026-03-20
CVE-2026-33191 free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error CWE-158 7.5 - 2026-03-20
CVE-2026-2525 Free5GC PFCP UDP Endpoint denial of service CWE-404 5.3 Medium 2026-02-16
CVE-2026-1976 Free5GC SMF SessionDeletionResponse null pointer dereference CWE-476 5.3 Medium 2026-02-06
CVE-2026-1975 Free5GC pfcp_reports.go identityTriggerType null pointer dereference CWE-476 5.3 Medium 2026-02-06
CVE-2026-1974 Free5GC SMF datapath.go ResolveNodeIdToIp denial of service CWE-404 5.3 Medium 2026-02-06
CVE-2026-1973 Free5GC SMF establishPfcpSession null pointer dereference CWE-476 5.3 Medium 2026-02-06

All 43 known CVE vulnerabilities affecting Free5GC with full Chinese analysis, references, and POCs where available.