# free5GC vulnerabilities Source: https://junglewise.ai/threats/vendors/free5gc Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/free5gc.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 50 vulnerabilities in free5GC: 0 in the last 7 days and 21 in the last 90 days, 7 of them critical and 0 exploited in the wild. The most recent, CVE-2026-106805, was published on 2 November 2026. 1 vulnerability in the last four weeks, down 50% on the four before (2). 7 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 21 - All time: 50 (7 critical, 0 exploited in the wild) ## About free5GC free5GC is an open-source project for the 5th generation mobile core network. ## Latest free5GC vulnerabilities - [CVE-2026-106805: Free5GC SMF resource exhaustion in PFCP session establishment](https://junglewise.ai/threats/cve-2026-106805-a-resource-exhaustion-issue-exists-in-free5gc-v4-2-3-during-pfcp) (info, published 2 Nov 2026) - [CVE-2026-94043: Free5GC race condition in GMM handler RanUe context access](https://junglewise.ai/threats/cve-2026-94043-a-vulnerability-was-determined-in-free5gc-up-to-4-2-3-this) (medium, CVSS 5.3, published 20 Sep 2026) - [CVE-2026-47780: free5GC UDR improper input validation in EE subscription handlers](https://junglewise.ai/threats/cve-2026-47780-free5gc-udr-improper-input-validation-in-ee-subscription-handlers) (medium, CVSS 4, published 15 Sep 2026) - [CVE-2026-75439: Free5GC UPF nil pointer dereference in PFCP Session Report](https://junglewise.ai/threats/cve-2026-75439-free5gc-upf-nil-pointer-dereference-in-pfcp-session-report) (high, CVSS 7.5, published 4 Sep 2026) - [CVE-2026-55068: free5GC NRF input validation bypass in NF profile registration](https://junglewise.ai/threats/cve-2026-55068-free5gc-nrf-input-validation-bypass-in-nf-profile-registration) (critical, CVSS 4, published 28 Aug 2026) - [CVE-2026-30073: free5gc NSSF nil pointer dereference in NssaiAvailabilitySubscriptionCreate](https://junglewise.ai/threats/cve-2026-30073-free5gc-nssf-nil-pointer-dereference-in) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30072: free5gc CHF NULL pointer dereference in CDR processing](https://junglewise.ai/threats/cve-2026-30072-free5gc-chf-null-pointer-dereference-in-cdr-processing) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30071: free5gc RechargePut denial of service in input parsing](https://junglewise.ai/threats/cve-2026-30071-free5gc-rechargeput-denial-of-service-in-input-parsing) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30070: free5GC UDM HandleGetSharedData denial of service](https://junglewise.ai/threats/cve-2026-30070-free5gc-udm-handlegetshareddata-denial-of-service) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30069: free5GC NULL pointer dereference in UDMC registration handler](https://junglewise.ai/threats/cve-2026-30069-free5gc-null-pointer-dereference-in-udmc-registration-handler) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30068: free5GC UDM improper input validation in parameter provisioning](https://junglewise.ai/threats/cve-2026-30068-free5gc-udm-improper-input-validation-in-parameter-provisioning) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30067: free5gc NRF Discovery denial of service in complexQueryFilterSubprocess](https://junglewise.ai/threats/cve-2026-30067-free5gc-nrf-discovery-denial-of-service-in) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30064: free5gc OAuth2 token endpoint denial of service via unmatched form key](https://junglewise.ai/threats/cve-2026-30064-free5gc-oauth2-token-endpoint-denial-of-service-via-unmatched) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30063: free5gc NF Discovery endpoint denial of service via malformed snssais parameter](https://junglewise.ai/threats/cve-2026-30063-free5gc-nf-discovery-endpoint-denial-of-service-via-malformed) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30062: free5gc NGAP handler denial of service via malformed NAS PDU](https://junglewise.ai/threats/cve-2026-30062-free5gc-ngap-handler-denial-of-service-via-malformed-nas-pdu) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30059: free5gc NAS decoder denial of service in 5GSID validation](https://junglewise.ai/threats/cve-2026-30059-free5gc-nas-decoder-denial-of-service-in-5gsid-validation) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30058: free5gc AMF denial of service in HTTPModifySubscription](https://junglewise.ai/threats/cve-2026-30058-free5gc-amf-denial-of-service-in-httpmodifysubscription) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30057: free5gc AMF CreateUEContext denial of service via multipart deserialization](https://junglewise.ai/threats/cve-2026-30057-free5gc-amf-createuecontext-denial-of-service-via-multipart) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30056: free5gc AMF NGAP Dispatcher NULL pointer dereference](https://junglewise.ai/threats/cve-2026-30056-free5gc-amf-ngap-dispatcher-null-pointer-dereference) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30051: free5gc AMF denial of service via crafted UE context request](https://junglewise.ai/threats/cve-2026-30051-free5gc-amf-denial-of-service-via-crafted-ue-context-request) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-30050: free5gc ModifyAMFEventSubscriptionProcedure denial of service via negative array index](https://junglewise.ai/threats/cve-2026-30050-free5gc-modifyamfeventsubscriptionprocedure-denial-of-service-via) (high, CVSS 7.5, published 27 Aug 2026) - [CVE-2026-53551: free5gc AUSF improper input validation in supiOrSuci field](https://junglewise.ai/threats/cve-2026-53551-free5gc-ausf-improper-input-validation-in-supiorsuci-field) (medium, CVSS 4, published 31 Jul 2026) - [CVE-2026-44330: free5GC NEF authentication bypass in nnef-pfdmanagement API](https://junglewise.ai/threats/cve-2026-44330-free5gc-nef-authentication-bypass-in-nnef-pfdmanagement-api) (critical, CVSS 10, published 27 May 2026) - [CVE-2026-44329: free5GC SMF missing authentication in UPI management interface](https://junglewise.ai/threats/cve-2026-44329-free5gc-smf-missing-authentication-in-upi-management-interface) (critical, CVSS 10, published 27 May 2026) - [CVE-2026-44328: free5GC SMF unauthenticated DoS and state mutation in UPI handler](https://junglewise.ai/threats/cve-2026-44328-free5gc-smf-unauthenticated-dos-and-state-mutation-in-upi-handler) (high, CVSS 8.2, published 27 May 2026) ## Most severe free5GC vulnerabilities - [CVE-2026-44329: free5GC SMF missing authentication in UPI management interface](https://junglewise.ai/threats/cve-2026-44329-free5gc-smf-missing-authentication-in-upi-management-interface) (critical, CVSS 10, published 27 May 2026) - [CVE-2026-44327: free5GC NEF missing authentication in OAM route group](https://junglewise.ai/threats/cve-2026-44327-free5gc-nef-missing-authentication-in-oam-route-group) (critical, CVSS 10, published 27 May 2026) - [CVE-2026-44330: free5GC NEF authentication bypass in nnef-pfdmanagement API](https://junglewise.ai/threats/cve-2026-44330-free5gc-nef-authentication-bypass-in-nnef-pfdmanagement-api) (critical, CVSS 10, published 27 May 2026) - [CVE-2026-44326: free5GC NEF missing authentication in 3gpp-traffic-influence API](https://junglewise.ai/threats/cve-2026-44326-free5gc-nef-missing-authentication-in-3gpp-traffic-influence-api) (critical, CVSS 9.4, published 27 May 2026) - [CVE-2026-44315: free5GC NEF missing authorization in 3gpp-pfd-management API](https://junglewise.ai/threats/cve-2026-44315-free5gc-nef-missing-authorization-in-3gpp-pfd-management-api) (critical, CVSS 9.4, published 27 May 2026) - [CVE-2025-66719: Free5gc NRF scope validation bypass in access-token generation](https://junglewise.ai/threats/cve-2025-66719-free5gc-nrf-scope-validation-bypass-in-access-token-generation) (critical, CVSS 9.1, published 23 Jan 2026) - [CVE-2026-55068: free5GC NRF input validation bypass in NF profile registration](https://junglewise.ai/threats/cve-2026-55068-free5gc-nrf-input-validation-bypass-in-nf-profile-registration) (critical, CVSS 4, published 28 Aug 2026) - [CVE-2026-42083: free5GC PCF missing authorization in SMPolicyControl and UEPolicyControl](https://junglewise.ai/threats/cve-2026-42083-free5gc-pcf-missing-authorization-in-smpolicycontrol-and) (high, CVSS 8.2, published 27 May 2026) - [CVE-2026-44328: free5GC SMF unauthenticated DoS and state mutation in UPI handler](https://junglewise.ai/threats/cve-2026-44328-free5gc-smf-unauthenticated-dos-and-state-mutation-in-upi-handler) (high, CVSS 8.2, published 27 May 2026) - [CVE-2026-75439: Free5GC UPF nil pointer dereference in PFCP Session Report](https://junglewise.ai/threats/cve-2026-75439-free5gc-upf-nil-pointer-dereference-in-pfcp-session-report) (high, CVSS 7.5, published 4 Sep 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, down 50% on the four before (2). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 17 | 1 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 2 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## free5GC technologies - [free5GC](https://junglewise.ai/threats/technologies/free5gc): 29 vulnerabilities - [free5GC Nef](https://junglewise.ai/threats/technologies/nef): 7 vulnerabilities - [free5GC Udr](https://junglewise.ai/threats/technologies/udr): 7 vulnerabilities - [free5GC Pcf](https://junglewise.ai/threats/technologies/pcf): 4 vulnerabilities - [free5GC NRF](https://junglewise.ai/threats/technologies/nrf): 3 vulnerabilities - [free5GC SMF](https://junglewise.ai/threats/technologies/smf): 3 vulnerabilities - [free5GC Udm](https://junglewise.ai/threats/technologies/udm): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "free5GC vulnerabilities", https://junglewise.ai/threats/vendors/free5gc, 13 November 2026.