free5gc

Records87All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high38CVSS 7.0–8.9

Exploited now

free5gc records in CISA KEV

No free5gc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Free5gc 59 records HIGH Udm 9 records HIGH Smf 5 records HIGH Udr 4 records MEDIUM Pcf 3 records HIGH Amf 2 records MEDIUM Go-upf 2 records LOW Webconsole 2 records HIGH

Records

9 records in Udm · all components

TI-2026-25617 CVE-2026-33192 · GHSA-5rvc-5cwx-g5x8

free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques

HIGH 77

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00333 Published 2026-03-20 Fixed in 1.4.2 CWE-209

TI-2026-25506 CVE-2026-33064 · GHSA-7g27-v5wj-jr75

free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference

HIGH 77

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00506 Published 2026-03-20 Fixed in 1.4.2 CWE-478

TI-2026-25507 CVE-2026-33065 · GHSA-958m-gxmc-mccm

free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request

HIGH 70

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00294 Published 2026-03-20 Fixed in 1.4.2 CWE-209

TI-2026-25616 CVE-2026-33191 · GHSA-p9hg-pq3q-v9gv

free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error

MEDIUM 44

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00368 Published 2026-03-20 Fixed in 1.4.2 CWE-158

TI-2026-22024 CVE-2026-27642

free5GC has Improper Input Validation in UDM UEAU Service

LOW 36

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.0057 Published 2026-02-24 No fix listed CWE-20

TI-2025-42704 CVE-2025-69252

free5GC has Null Pointer Dereference in UDM, Leading to Service Panic

LOW 36

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00592 Published 2026-02-23 No fix listed CWE-476

TI-2025-42703 CVE-2025-69251

free5GC has Improper Input Validation in UDM, Leading to Information Exposure

LOW 36

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.0052 Published 2026-02-23 No fix listed CWE-20

TI-2025-42702 CVE-2025-69250

free5GC has Improper Error Handling in UDM, Leading to Information Exposure

LOW 36

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00463 Published 2026-02-23 No fix listed CWE-20

TI-2023-24934 CVE-2023-46324 · GHSA-cqvv-r3g3-26rf

pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an…

LOW 33

pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2023-10-23 Fixed in 1.2.0 CWE-347

Open these records in search →

Critical	9
High	38
Medium	36
Low	4
No CVSS	0