What’s Vulnerable › Products

free5gc smf vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your free5gc smf version is affected

Latest free5gc smf vulnerabilities

• CVE-2026-26025 — free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE  (CVSS 7.5)
• CVE-2026-26024 — free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE  (CVSS 7.5)
• CVE-2026-25501 — free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.DLDR is set but DownlinkDataReport IE is missing (CVSS 7.5)
• CVE-2025-69232 — free5GC hasProtocol Compliance Violation in UPF Leading to SMF Service Disruption (CVSS 7.5)
• CVE-2023-47346 — (CVSS 7.5)