What’s Vulnerable › Products

free5gc udm vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your free5gc udm version is affected

Latest free5gc udm vulnerabilities

• CVE-2026-33192 — free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques (CVSS 5.3)
• CVE-2026-33191 — free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error (CVSS 8.6)
• CVE-2026-33065 — free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request (CVSS 5.3)
• CVE-2026-33064 — free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference (CVSS 7.5)
• CVE-2026-27642 — free5GC has Improper Input Validation in UDM UEAU Service (CVSS 7.5)
• CVE-2025-69252 — free5GC has Null Pointer Dereference in UDM, Leading to Service Panic (CVSS 7.5)
• CVE-2025-69251 — free5GC has Improper Input Validation in UDM, Leading to Information Exposure (CVSS 5.3)
• CVE-2025-69250 — free5GC has Improper Error Handling in UDM, Leading to Information Exposure (CVSS 7.5)
• CVE-2023-46324 — (CVSS 7.5)