free5gc vulnerabilities and fixes
Recent CVEs affecting free5gc, with upgrade or downgrade steps. 3 tracked.
free5gc has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-04-22. Highest priority: CVE-2026-40343 (score 49/100).
- CVE-2026-40343 MEDIUM 5.8 UPGRADE UPGRADE free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) m
- CVE-2026-41135 HIGH 7.5 UPGRADE UPGRADE free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G
- CVE-2026-41136 MEDIUM 5.3 UPGRADE UPGRADE free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5t
FAQ
How do I fix free5gc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is free5gc being exploited right now?
None of the tracked free5gc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which free5gc CVE should I patch first?
CVE-2026-40343 currently ranks highest (49/100): free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) m.