Skip to content
Threat Feed

Tag

Free5gc

2 briefs RSS
high advisory

free5gc UDR Improper Path Validation Allows Unauthenticated Access to Traffic Influence Subscriptions

An improper path validation vulnerability exists in the free5gc UDR service, allowing unauthenticated attackers with access to the 5G Service Based Interface (SBI) to read Traffic Influence Subscriptions.

free5GC UDR path-validation information-disclosure
2r 2t 1i
high advisory

Free5GC AMF Denial-of-Service Vulnerability (CVE-2026-30653)

A remote attacker can exploit CVE-2026-30653 in Free5GC v4.2.0 and earlier by sending crafted requests to the AMF component's HandleAuthenticationFailure function, leading to a denial-of-service condition.

free5gc denial-of-service cve-2026-30653 amf
2r 2t