Vulnerability index

Browse CVEs

81 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Free5gc CRITICAL 10.0
CVE-2026-44327

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route group without inbound OAuth2…

Fix: 4.2.2+
Fix from $2,300 2026-05-27
Free5gc CRITICAL 10.0
CVE-2026-44329

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/b…

Fix: 4.2.2+
Fix from $2,300 2026-05-27
Free5gc CRITICAL 10.0
CVE-2026-44330

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-pfdmanagement route group without inbo…

Fix: 4.2.2+
Fix from $2,300 2026-05-27
Free5gc CRITICAL 9.4
CVE-2026-44326

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-traffic-influence API without inbound …

Fix: 4.2.2+
Fix from $2,300 2026-05-27
Free5gc HIGH 8.2
CVE-2026-44328

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound …

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc HIGH 7.5
CVE-2026-44319

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF terminates the entire process when a stored PFD-subscr…

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc HIGH 7.5
CVE-2026-44321

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound …

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc HIGH 7.5
CVE-2026-44322

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF PATCH /3gpp-pfd-management/v1/{afId}/transactions/{tra…

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc HIGH 7.5
CVE-2026-44325

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser…

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc HIGH 7.3
CVE-2026-44320

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-callback route group without inbound O…

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc MEDIUM 6.5
CVE-2026-44323

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnI…

Fix: 4.2.2+
Fix from $1,600 2026-05-27
Free5gc MEDIUM 6.5
CVE-2026-44324

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnI…

Fix: 4.2.2+
Fix from $1,600 2026-05-27
Free5gc CRITICAL 9.4
CVE-2026-44315

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-pfd-management API without inbound OAu…

Fix: 4.2.2+
Fix from $2,300 2026-05-27
Free5gc HIGH 7.5
CVE-2026-44316

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-smpolicycontrol/v1/sm-policies handler (Han…

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc MEDIUM 6.5
CVE-2026-44317

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-policyauthorization/v1/app-sessions handler…

Fix: 4.2.2+
Fix from $1,600 2026-05-27
Free5gc MEDIUM 5.3
CVE-2026-44318

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's BSF PUT /nbsf-management/v1/subscriptions/{subId} handler …

Fix: 4.2.2+
Fix from $1,600 2026-05-27
Free5gc HIGH 8.2
CVE-2026-42083

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, PCF Npcf_SMPolicyControl missing authentication middleware allows un…

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc HIGH 7.5
CVE-2026-42459

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter …

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc MEDIUM 5.4
CVE-2026-42082

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedur…

Fix: 4.2.2+
Fix from $1,600 2026-05-27
Free5gc HIGH 7.1
CVE-2026-42081

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not verify the UE Security Capabilities rece…

Fix: 4.2.2+
Fix from $1,950 2026-05-27
Free5gc HIGH 7.5
CVE-2026-41135

free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. A memory leak v…

Fix: 1.4.3+
Fix from $1,950 2026-04-22
Amf MEDIUM 5.3
CVE-2026-41136

free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.…

Fix: 1.4.3+
Fix from $1,600 2026-04-22
Udr MEDIUM 5.8
CVE-2026-40343EPSS 10%

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versions up to …

Fix: after 4.2.1
Fix from $1,600 2026-04-22
Free5gc HIGH 7.5
CVE-2026-40246

free5GC is an open-source implementation of the 5G core network. In versions 1.4.2 and below of the UDR service, the handler for deleting Traffic Inf…

Fix: after 1.4.2
Fix from $1,950 2026-04-16
Free5gc HIGH 7.5
CVE-2026-40247

free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the handler for reading Traffic Infl…

Fix: after 4.2.1
Fix from $1,950 2026-04-16
Free5gc HIGH 7.5
CVE-2026-40248

free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the handler for creating or updating…

Fix: after 4.2.1
Fix from $1,950 2026-04-16
Free5gc MEDIUM 5.3
CVE-2026-40249

free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the PUT handler for updating Policy …

Fix: after 4.2.1
Fix from $1,600 2026-04-16
Free5gc HIGH 7.5
CVE-2026-40245

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions 4.2.1 and below contain an information disc…

Fix: after 4.2.1
Fix from $1,950 2026-04-16
Free5gc HIGH 7.5
CVE-2026-30653

An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the comp…

Fix: after 4.2.0
Fix from $1,950 2026-03-24
Udm MEDIUM 5.3
CVE-2026-33192

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.4.2, the UDM incorrectly conv…

Fix: 1.4.2+
Fix from $1,600 2026-03-20