CVE-2026-2525

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-2525
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2525.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-2525
Published
2026-02-16T01:02:06.733Z
Modified
2026-08-12T03:51:17.590950776Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
Free5GC PFCP UDP Endpoint denial of service
Details

A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2525.json",
    "cwe_ids": [
        "CWE-404"
    ],
    "cna_assigner": "VulDB"
}
References

Affected packages

Git / github.com/free5gc/free5gc

Affected ranges

Type
GIT
Repo
https://github.com/free5gc/free5gc
Events
Introduced
909d7d46527c6570c153896fa58020255a0e1ca8
Last affected
de6bdb7a0d5963266c893cca59c86f55df348f57
Database specific
Show details 
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0"
        },
        {
            "last_affected": "4.0"
        },
        {
            "introduced": "4.1.0"
        },
        {
            "last_affected": "4.1.0"
        },
        {
            "introduced": "0"
        }
    ]
}

Affected versions

4.*
4.0
4.1.0
v4.*
v4.0.0
v4.0.1
v4.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2525.json"