Vulnerabilities

TI-2026-25617 CVE-2026-33192 · GHSA-5rvc-5cwx-g5x8

free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques

HIGH 77

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00333 Published 2026-03-20 Fixed in 1.4.2 CWE-209

TI-2026-25507 CVE-2026-33065 · GHSA-958m-gxmc-mccm

free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request

HIGH 70

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00294 Published 2026-03-20 Fixed in 1.4.2 CWE-209

TI-2026-25506 CVE-2026-33064 · GHSA-7g27-v5wj-jr75

free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference

HIGH 77

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00506 Published 2026-03-20 Fixed in 1.4.2 CWE-478

TI-2026-25616 CVE-2026-33191 · GHSA-p9hg-pq3q-v9gv

free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error

MEDIUM 44

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00368 Published 2026-03-20 Fixed in 1.4.2 CWE-158

TI-2026-22024 CVE-2026-27642

free5GC has Improper Input Validation in UDM UEAU Service

LOW 36

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.0057 Published 2026-02-24 No fix listed CWE-20

TI-2025-42704 CVE-2025-69252

free5GC has Null Pointer Dereference in UDM, Leading to Service Panic

LOW 36

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00592 Published 2026-02-23 No fix listed CWE-476

TI-2025-42703 CVE-2025-69251

free5GC has Improper Input Validation in UDM, Leading to Information Exposure

LOW 36

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.0052 Published 2026-02-23 No fix listed CWE-20

TI-2025-42702 CVE-2025-69250

free5GC has Improper Error Handling in UDM, Leading to Information Exposure

LOW 36

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00463 Published 2026-02-23 No fix listed CWE-20

TI-2023-24934 CVE-2023-46324 · GHSA-cqvv-r3g3-26rf

pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an…

LOW 33

pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2023-10-23 Fixed in 1.2.0 CWE-347

Vulnerabilities

Filters