CVE-2026-1683

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-1683
A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the function HandlePfcpSessionReportRequest of the file internal/pfcp/handler/handler.go of the component PFCP. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. To fix this issue, it is recommended to deploy a patch.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/free5gc/free5gc/issues/804 Exploit Issue Tracking
https://github.com/free5gc/free5gc/issues/804#issue-3816086696 Exploit Issue Tracking Vendor Advisory
https://github.com/free5gc/smf/
https://github.com/free5gc/smf/pull/188 Issue Tracking
https://vuldb.com/?ctiid.343476 Permissions Required VDB Entry
https://vuldb.com/?id.343476 Third Party Advisory VDB Entry
https://vuldb.com/?submit.739653 Third Party Advisory VDB Entry
https://vuldb.com/?submit.739654 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*
History

23 Feb 2026, 10:16

Type Values Removed Values Added
References
  • () https://github.com/free5gc/smf/ -

17 Feb 2026, 19:23

Type Values Removed Values Added
CPE cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*
First Time Free5gc free5gc
Free5gc
References () https://github.com/free5gc/free5gc/issues/804 - () https://github.com/free5gc/free5gc/issues/804 - Exploit, Issue Tracking
References () https://github.com/free5gc/free5gc/issues/804#issue-3816086696 - () https://github.com/free5gc/free5gc/issues/804#issue-3816086696 - Exploit, Issue Tracking, Vendor Advisory
References () https://github.com/free5gc/smf/pull/188 - () https://github.com/free5gc/smf/pull/188 - Issue Tracking
References () https://vuldb.com/?ctiid.343476 - () https://vuldb.com/?ctiid.343476 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.343476 - () https://vuldb.com/?id.343476 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.739653 - () https://vuldb.com/?submit.739653 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.739654 - () https://vuldb.com/?submit.739654 - Third Party Advisory, VDB Entry

30 Jan 2026, 14:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-30 14:16

Updated : 2026-02-23 10:16

NVD link : CVE-2026-1683

Mitre link : CVE-2026-1683

CVE.ORG link : CVE-2026-1683

JSON object : View

Products Affected

free5gc

  • free5gc
CWE
CWE-404

Improper Resource Shutdown or Release