CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,500 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,500
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product free5gc:free5gc. Show all products

56 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2025-63679High 7.5free5gc v4.1.0 and before is vulnerable to Buffer Overflow.Nov 12, 2025
CVE-2025-60632Medium 6.5An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicyControl API.Nov 24, 2025
CVE-2025-60633Medium 6.5An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API.Nov 24, 2025
CVE-2025-60638High 7.5An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssf_NSSAIAvailability API.Nov 24, 2025
CVE-2025-65561High 7.5An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via crafted header Local SEID to the PFCP Session Modi…Dec 18, 2025
CVE-2025-65562High 7.5The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests.Dec 18, 2025
CVE-2026-1682High 7.5A flaw has been found in Free5GC SMF up to 4.1.0.Jan 30, 2026
CVE-2026-1683High 7.5A vulnerability has been found in Free5GC SMF up to 4.1.0.Jan 30, 2026
CVE-2026-1684High 7.5A vulnerability was found in Free5GC SMF up to 4.1.0.Jan 30, 2026
CVE-2026-1973High 7.5A vulnerability was determined in Free5GC up to 4.1.0.Feb 6, 2026
CVE-2026-1974High 7.5A vulnerability was identified in Free5GC up to 4.1.0.Feb 6, 2026
CVE-2026-1975High 7.5A security flaw has been discovered in Free5GC up to 4.1.0.Feb 6, 2026
CVE-2026-1976High 7.5A weakness has been identified in Free5GC up to 4.1.0.Feb 6, 2026
CVE-2025-70121High 7.5An array index out of bounds vulnerability in the AMF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted 5GS Mobile Identity in a NAS Registration Request…Feb 13, 2026
CVE-2025-70122High 7.5A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted PFCP Session Modification Request.Feb 13, 2026
CVE-2025-70123High 7.5An improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows remote attackers to cause a denial of service.Feb 13, 2026
CVE-2026-2525High 7.5A vulnerability has been found in Free5GC up to 4.1.0.Feb 16, 2026
CVE-2026-32937Medium 6.5free5GC is an open source 5G core network.Mar 20, 2026
CVE-2026-33062High 7.5free5GC is an open source 5G core network.Mar 20, 2026
CVE-2026-33063High 7.5free5GC is an open source 5G core network.Mar 20, 2026
CVE-2026-30653High 7.5An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMFMar 24, 2026
CVE-2026-5360Low 3.7A vulnerability has been found in Free5GC 4.2.0.Apr 2, 2026
CVE-2026-40245High 7.5Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Apr 16, 2026
CVE-2026-40246High 7.5free5GC is an open-source implementation of the 5G core network.Apr 16, 2026
CVE-2026-40247High 7.5free5GC is an open-source implementation of the 5G core network.Apr 16, 2026
CVE-2026-40248High 7.5free5GC is an open-source implementation of the 5G core network.Apr 16, 2026
CVE-2026-40249Medium 5.3free5GC is an open-source implementation of the 5G core network.Apr 16, 2026
CVE-2026-40343Medium 5.8free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.Apr 22, 2026
CVE-2026-41135High 7.5free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.Apr 22, 2026
CVE-2026-41136Medium 5.3free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.Apr 22, 2026
CVE-2026-42081High 7.1free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-42082Medium 5.4free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-42083High 8.2free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-42459High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44315Critical 9.4free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44316High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44317Medium 6.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44318Medium 5.3free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44319High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44320High 7.3free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44321High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44322High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44323Medium 6.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44324Medium 6.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44325High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44326Critical 9.4free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44327Critical 10.0free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44328High 8.2free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44329Critical 10.0free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44330Critical 10.0free5GC is an open-source implementation of the 5G core network.May 27, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.