TI-2026-29040 CVE-2026-40246 · GHSA-g9cw-qwhf-24jp
free5gc UDR improper path validation allows unauthenticated deletion of Traffic Influence Subscriptions
Priority HIGH 77
free5GC is an open-source implementation of the 5G core network.
free5gc
Records87All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high38CVSS 7.0–8.9
Exploited now
free5gc records in CISA KEVNo free5gc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Webconsole · all components
TI-2023-04293 CVE-2023-4659 · GHSA-cg7m-7w47-wjq6
Cross-Site Request Forgery in Free5Gc
Priority MEDIUM 49
Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin".