free5gc smf vulnerabilities
7 published CVEs name free5gc smf among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-26025
free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE 
free5gc · smf
Medium6.6 - CVE-2026-26024
free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE 
free5gc · smf
Medium6.6 - CVE-2026-25501
free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.DLDR is set but DownlinkDataReport IE is missing
free5gc · smf
Medium6.6 - CVE-2025-69232
free5GC hasProtocol Compliance Violation in UPF Leading to SMF Service Disruption
free5gc · go-upf
Low2.7 - CVE-2026-1684
Free5GC SMF PFCP UDP Endpoint pfcp_reports.go HandleReports denial of service
Free5GC · SMF
Medium6.9 - CVE-2026-1683
Free5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of service
Free5GC · SMF
Medium6.9 - CVE-2026-1682
Free5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereference
Free5GC · SMF
Medium6.9