medium
advisory
free5gc bsf: Missing authentication (CVE-2026-115926)
A public proof-of-concept exploit has been published for CVE-2026-115926, which involves a complete absence of authentication in the free5gc 'bsf' package.
CVE search metadata
CVE search record: CVE-2026-115926. Severity: medium. CVSS: 6.0. KEV: no. Product: bsf. Brief: free5gc bsf: Missing authentication (CVE-2026-115926). Brief link: https://feed.craftedsignal.io/briefs/2026-10-free5gc-bsf-auth/
Triage facts
Revision 1- Applicability
- bsf
- Evidence
- Unknown
- Severity
- Medium
- Sources
- 3 public sources
- Freshness
- Revision 1Oct 29, 21:24 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3Roughly even chance
A public proof-of-concept exploit is available for CVE-2026-115926, a vulnerability identified as a complete absence of authentication in the free5gc 'bsf' package. The vulnerability is rated at 6.0 (Medium Severity).