CVE-2026-1974

EUVD-2026-5604
A vulnerability was identified in Free5GC up to 4.1.0. This affects the function ResolveNodeIdToIp of the file internal/sbi/processor/datapath.go of the component SMF. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. It is recommended to apply a patch to fix this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
VulDBCNA
5.3 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Affected Products (NVD)
VendorProductVersion
free5gcfree5gc
𝑥
≤ 4.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/free5gc/free5gc/
https://github.com/free5gc/free5gc/issues/816
https://github.com/free5gc/free5gc/issues/816#issue-3832055233
https://github.com/free5gc/smf/pull/189
https://vuldb.com/?ctiid.344496
https://vuldb.com/?id.344496
https://vuldb.com/?submit.743237