CVE-2026-1683

EUVD-2026-5031
A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the function HandlePfcpSessionReportRequest of the file internal/pfcp/handler/handler.go of the component PFCP. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. To fix this issue, it is recommended to deploy a patch.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
VulDBCNA
5.3 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
Affected Products (NVD)
VendorProductVersion
free5gcfree5gc
𝑥
≤ 4.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/free5gc/free5gc/issues/804
https://github.com/free5gc/free5gc/issues/804#issue-3816086696
https://github.com/free5gc/smf/pull/188
https://vuldb.com/?ctiid.343476
https://vuldb.com/?id.343476
https://vuldb.com/?submit.739653
https://vuldb.com/?submit.739654