https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-26025.htmlhttps://patchthecve.com/cve/CVE-2026-26025.htmlWed, 17 Jun 2026 10:25:37 +0000HIGH 7.5: free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics and terminates when processing a malformed PFCP SessionReportRequest on the PFCP (UDP/8805) interface. No known upstrehttps://patchthecve.com/cve/CVE-2026-26024.htmlhttps://patchthecve.com/cve/CVE-2026-26024.htmlWed, 17 Jun 2026 10:25:37 +0000HIGH 7.5: free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics and terminates when processing a malformed PFCP SessionReportRequest on the PFCP (UDP/8805) interface. No known upstrehttps://patchthecve.com/cve/CVE-2026-25501.htmlhttps://patchthecve.com/cve/CVE-2026-25501.htmlWed, 17 Jun 2026 10:24:44 +0000HIGH 7.5: free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics due to nil pointer dereference and the SMF process terminates. This is triggered by a malformed PFCP SessionReportRequehttps://patchthecve.com/cve/CVE-2025-69232.htmlhttps://patchthecve.com/cve/CVE-2025-69232.htmlWed, 17 Jun 2026 10:00:20 +0000HIGH 7.5: free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf versions up to and including 1.2.6, corresponding to free5gc smf up to and including 1.4.0, have an Improper Input Validation and Protocol Compliance vulnerability leading to Denial of Service. Remote attahttps://patchthecve.com/cve/CVE-2023-47346.htmlhttps://patchthecve.com/cve/CVE-2023-47346.htmlWed, 17 Jun 2026 06:32:37 +0000HIGH 7.5: Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages.https://patchthecve.com/cve/CVE-2012-5903.htmlhttps://patchthecve.com/cve/CVE-2012-5903.htmlTue, 16 Jun 2026 23:47:33 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the scheduled parameter to index.php.