CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,476 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,476
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product free5gc:free5gc. Show all products

56 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2026-94043Medium 5.3Free5GC Gmm handler.go race condition
Assigned by VulDB
Sep 20, 2026
CVE-2026-47780Medium 6.9free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistence
Assigned by GitHub_M
Sep 15, 2026
CVE-2026-55785Low 3.7free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
Assigned by GitHub_M
Aug 28, 2026
CVE-2026-55784High 7.5free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI
Assigned by GitHub_M
Aug 28, 2026
CVE-2026-55068Critical 9.3free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints
Assigned by GitHub_M
Aug 28, 2026
CVE-2026-53551Medium 6.9free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure
Assigned by GitHub_M
Jul 31, 2026
CVE-2026-44330Critical 10.0free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44329Critical 10.0free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44328High 8.2free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44327Critical 10.0free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44326Critical 9.4free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44325High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44324Medium 6.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44323Medium 6.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44322High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44321High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44320High 7.3free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44319High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44318Medium 5.3free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44317Medium 6.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44316High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-44315Critical 9.4free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-42459High 7.5free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-42083High 8.2free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-42082Medium 5.4free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-42081High 7.1free5GC is an open-source implementation of the 5G core network.May 27, 2026
CVE-2026-41136Medium 5.3free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.Apr 22, 2026
CVE-2026-41135High 7.5free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.Apr 22, 2026
CVE-2026-40343Medium 5.8free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.Apr 22, 2026
CVE-2026-40249Medium 5.3free5GC is an open-source implementation of the 5G core network.Apr 16, 2026
CVE-2026-40248High 7.5free5GC is an open-source implementation of the 5G core network.Apr 16, 2026
CVE-2026-40247High 7.5free5GC is an open-source implementation of the 5G core network.Apr 16, 2026
CVE-2026-40246High 7.5free5GC is an open-source implementation of the 5G core network.Apr 16, 2026
CVE-2026-40245High 7.5Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Apr 16, 2026
CVE-2026-5360Low 3.7A vulnerability has been found in Free5GC 4.2.0.Apr 2, 2026
CVE-2026-30653High 7.5An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMFMar 24, 2026
CVE-2026-33063High 7.5free5GC is an open source 5G core network.Mar 20, 2026
CVE-2026-33062High 7.5free5GC is an open source 5G core network.Mar 20, 2026
CVE-2026-32937Medium 6.5free5GC is an open source 5G core network.Mar 20, 2026
CVE-2026-2525High 7.5A vulnerability has been found in Free5GC up to 4.1.0.Feb 16, 2026
CVE-2025-70123High 7.5An improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows remote attackers to cause a denial of service.Feb 13, 2026
CVE-2025-70122High 7.5A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted PFCP Session Modification Request.Feb 13, 2026
CVE-2025-70121High 7.5An array index out of bounds vulnerability in the AMF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted 5GS Mobile Identity in a NAS Registration Request…Feb 13, 2026
CVE-2026-1976High 7.5A weakness has been identified in Free5GC up to 4.1.0.Feb 6, 2026
CVE-2026-1975High 7.5A security flaw has been discovered in Free5GC up to 4.1.0.Feb 6, 2026
CVE-2026-1974High 7.5A vulnerability was identified in Free5GC up to 4.1.0.Feb 6, 2026
CVE-2026-1973High 7.5A vulnerability was determined in Free5GC up to 4.1.0.Feb 6, 2026
CVE-2026-1684High 7.5A vulnerability was found in Free5GC SMF up to 4.1.0.Jan 30, 2026
CVE-2026-1683High 7.5A vulnerability has been found in Free5GC SMF up to 4.1.0.Jan 30, 2026
CVE-2026-1682High 7.5A flaw has been found in Free5GC SMF up to 4.1.0.Jan 30, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.