PatchTheCVEsmf vulnerabilities and fixes
Recent CVEs affecting smf, with upgrade or downgrade steps. 6 tracked.
smf has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-02-24. Highest priority: CVE-2023-47346 (score 50/100).
- CVE-2026-26025 HIGH 7.5 UPGRADE free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) m
- CVE-2026-26024 HIGH 7.5 UPGRADE free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) m
- CVE-2026-25501 HIGH 7.5 UPGRADE free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) m
- CVE-2025-69232 HIGH 7.5 UPGRADE UPGRADE free5GC is an open-source project for 5th generation (5G) mobile core networks
- CVE-2023-47346 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of
- CVE-2012-5903 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote attackers to injec
FAQ
How do I fix smf vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is smf being exploited right now?
None of the tracked smf CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which smf CVE should I patch first?
CVE-2023-47346 currently ranks highest (50/100): Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of.