CVEvulnerability
CVE-2026-5661
5.5 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-04-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.5 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-404
Description
A vulnerability was identified in Free5GC 4.2.0. This affects an unknown function of the component NGSetupRequest Handler. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit is publicly available and might be used.
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://github.com/free5gc/amf/pull/201 github.com
- https://github.com/free5gc/free5gc/ github.com
- https://github.com/free5gc/free5gc/issues/832 github.com
- https://github.com/user-attachments/files/25581199/amfcfg.yaml github.com
- https://vuldb.com/submit/785896 vuldb.com
- https://vuldb.com/vuln/355485 vuldb.com
- https://vuldb.com/vuln/355485/cti vuldb.com