CVE-2026-2525

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-2525
A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/free5gc/free5gc/ Product
https://github.com/free5gc/free5gc/issues/796 Exploit Issue Tracking Vendor Advisory
https://github.com/free5gc/free5gc/issues/796#issue-3812169865 Exploit Issue Tracking Vendor Advisory
https://vuldb.com/?ctiid.346113 Permissions Required VDB Entry
https://vuldb.com/?id.346113 Third Party Advisory VDB Entry
https://vuldb.com/?submit.739509 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*
History

19 Feb 2026, 19:48

Type Values Removed Values Added
References () https://github.com/free5gc/free5gc/ - () https://github.com/free5gc/free5gc/ - Product
References () https://github.com/free5gc/free5gc/issues/796 - () https://github.com/free5gc/free5gc/issues/796 - Exploit, Issue Tracking, Vendor Advisory
References () https://github.com/free5gc/free5gc/issues/796#issue-3812169865 - () https://github.com/free5gc/free5gc/issues/796#issue-3812169865 - Exploit, Issue Tracking, Vendor Advisory
References () https://vuldb.com/?ctiid.346113 - () https://vuldb.com/?ctiid.346113 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.346113 - () https://vuldb.com/?id.346113 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.739509 - () https://vuldb.com/?submit.739509 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*
First Time Free5gc free5gc
Free5gc

18 Feb 2026, 17:52

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad en Free5GC hasta la versión 4.1.0. Esto afecta a una función desconocida del componente PFCP UDP Endpoint. Dicha manipulación conduce a una denegación de servicio. El ataque puede lanzarse de forma remota. El exploit ha sido revelado al público y puede ser utilizado.

16 Feb 2026, 02:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-16 02:16

Updated : 2026-02-19 19:48

NVD link : CVE-2026-2525

Mitre link : CVE-2026-2525

CVE.ORG link : CVE-2026-2525

JSON object : View

Products Affected

free5gc

  • free5gc
CWE
CWE-404

Improper Resource Shutdown or Release