CVE-2026-27643

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-27643
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27643.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-27643
Aliases
  • GHSA-6468-f87j-6g82
Published
2026-02-24T00:21:18.510Z
Modified
2026-02-26T19:35:40.019097Z
Severity
  • 6.6 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U CVSS Calculator
Summary
free5GC has improper error handling in NEF with information exposure
Details

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, the NEF component reliably leaks internal parsing error details (e.g., invalid character 'n' after top-level value) to remote clients, which can aid attackers in service fingerprinting. All deployments of free5GC using the Nnef_PfdManagement service may be affected. free5gc/udr pull request 56 contains a patch for the issue. There is no direct workaround at the application level. The recommendation is to apply the provided patch.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27643.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-209"
    ]
}
References

Affected packages

Git / github.com/free5gc/udr

Affected ranges

Type
GIT
Repo
https://github.com/free5gc/udr
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
754d23b03755ad59077ed529ce3b971e477080c4

Affected versions

v.*
v.1.2.5
v1.*
v1.0.0
v1.0.1
v1.0.2
v1.1.0
v1.1.1
v1.2.0
v1.2.1
v1.2.2
v1.2.3
v1.2.4
v1.3.0
v1.3.1
v1.3.2
v1.4.0
v1.4.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27643.json"