How many CVEs does free5gc have?

free5gc has 85 published CVE records since 2022, including 75 in the last two years.

How many free5gc CVEs are in CISA KEV?

None of free5gc's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which free5gc products have the most CVEs?

The free5gc products with the most published CVEs are free5gc, smf, udm, github.com/free5gc/udr, pcf.

What are the most common weakness types in free5gc CVEs?

free5gc's CVEs most often map to these CWE weakness types: CWE-404 (Improper Resource Shutdown or Release), CWE-20 (Improper Input Validation), CWE-476 (NULL Pointer Dereference), CWE-209 (Generation of Error Message Containing Sensitive Information).

Are there public exploits for free5gc vulnerabilities?

Yes — 61 of free5gc's CVEs have a known public exploit.

How many critical free5gc vulnerabilities are there?

free5gc has 8 critical and 37 high-severity CVEs.

What is the average severity of free5gc CVEs?

The average CVSS base score across free5gc's scored CVEs is 7.2.

RadicalNotion.AI

Log in Start free

85 CVEs

free5gc Vulnerabilities

Name: free5gc vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for free5gc.

85

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

61

Public exploits

PoC or exploit code

7.2

Avg CVSS

2022–2026

Overview

free5gc has 85 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 61 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting free5gc products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on free5gc's vulnerability posture, as a share of its 85 published CVEs.

Average CVSS: 7.2
Critical / high: 53%
Actively exploited (KEV): 0%
Public exploit available: 72%
Patch available: 69%

Severity and exploitation

How the CVSS severity of free5gc's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical8

High37

Medium37

Low3

In CISA’s Known Exploited Vulnerabilities catalog

0

None of free5gc's CVEs are currently listed in CISA's KEV catalog.

Public exploits

61

61 of free5gc's CVEs have a known public exploit available.

Most affected products

The free5gc products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in free5gc CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish free5gc CVE records.

Disclosure activity by year

How many free5gc CVEs were published each year.

2022

3

2023

7

2025

8

2026

67

Latest free5gc CVEs

The most recently disclosed vulnerabilities affecting free5gc.

free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure
CWE-20
Medium · CVSS 6.9
EPSS 0.4%2026-07-31
free5GC: UE Security Capability bypass on NGAP PathSwitchRequest
CWE-358
High · CVSS 7.1
EPSS 0.3%2026-05-27
free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover
CWE-358
Medium · CVSS 5.4
EPSS 0.3%2026-05-27
free5GC: PCF Npcf_SMPolicyControl missing authentication middleware allows unauthenticated access to SM policy handlers and disclosure of subscriber SUPI
CWE-862
High · CVSS 8.2
EPSS 0.3%2026-05-27
free5GC: Improper Input Validation and Generation of Error Message Containing Sensitive Information in github.com/free5gc/udm
CWE-20
High · CVSS 7.7
EPSS 0.3%2026-05-27
free5GC: NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions
CWE-862
Critical · CVSS 9.4
EPSS 0.3%2026-05-27
free5GC: PCF npcf-smpolicycontrol POST /sm-policies panics on downstream UDR/OpenAPI 404 via nil pointer dereference
CWE-754
High · CVSS 7.5
EPSS 0.4%2026-05-27
free5GC: PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference
CWE-476
Medium · CVSS 6.5
EPSS 0.4%2026-05-27
free5GC: NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)
CWE-20
High · CVSS 7.5
EPSS 0.4%2026-05-27
free5GC: NEF nnef-callback route group is unauthenticated; forged callback requests are accepted into the processing path
CWE-862
High · CVSS 7.3
EPSS 0.2%2026-05-27
free5GC: SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf)
CWE-862
High · CVSS 7.5
EPSS 0.4%2026-05-27
free5GC: NEF 3gpp-pfd-management PATCH applications/{appId} panics on UDR access failure due to nil ProblemDetails dereference
CWE-476
High · CVSS 7.5
EPSS 0.4%2026-05-27

Track new free5gc CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor free5gc CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Realtek86 CVEs Control Web Panel86 CVEs TrustedFirmware86 CVEs roxnor86 CVEs uclouvain86 CVEs mdadams85 CVEs OpenVPN85 CVEs perl85 CVEs

Browse all vendors

Frequently asked questions

Common questions about free5gc vulnerabilities.

How many CVEs does free5gc have?: free5gc has 85 published CVE records since 2022, including 75 in the last two years.
How many free5gc CVEs are in CISA KEV?: None of free5gc's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which free5gc products have the most CVEs?: The free5gc products with the most published CVEs are free5gc, smf, udm, github.com/free5gc/udr, pcf.
What are the most common weakness types in free5gc CVEs?: free5gc's CVEs most often map to these CWE weakness types: CWE-404 (Improper Resource Shutdown or Release), CWE-20 (Improper Input Validation), CWE-476 (NULL Pointer Dereference), CWE-209 (Generation of Error Message Containing Sensitive Information).
Are there public exploits for free5gc vulnerabilities?: Yes — 61 of free5gc's CVEs have a known public exploit.
How many critical free5gc vulnerabilities are there?: free5gc has 8 critical and 37 high-severity CVEs.
What is the average severity of free5gc CVEs?: The average CVSS base score across free5gc's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track free5gc vulnerabilities

Monitor new free5gc vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing