Vulnerabilities

TI-2026-29118 CVE-2026-40343 · GHSA-jwch-w7wh-gqjm

free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation

MEDIUM 48

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.08627 Published 2026-04-21 No fix listed CWE-754

TI-2026-22025 CVE-2026-27643

LOW 35

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00313 Published 2026-02-24 No fix listed CWE-209

TI-2025-42705 CVE-2025-69253

LOW 35

free5GC is an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00404 Published 2026-02-24 No fix listed CWE-209

TI-2025-42662 CVE-2025-69208

LOW 19

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00313 Published 2026-02-23 Fixed in 1.4.1 CWE-209