Denial of Service Vulnerability in NRF Discovery Service of free5gc
CVE-2026-30067

Currently unrated

Key Information:

Vendor

free5gc

Status
NRF Discovery Service
Vendor
CVE Published:
27 August 2026

What is CVE-2026-30067?

A vulnerability has been identified in the NRF Discovery service of free5gc v4.0.1, located within the complexQueryFilterSubprocess function. This flaw can be exploited by attackers who provide specially crafted input, resulting in a Denial of Service (DoS). Successful exploitation may lead to service disruption, hindering normal operations and accessibility. It is crucial for users of the affected version to assess their systems and apply necessary mitigations to prevent possible exploitation.

References

https://github.com/free5gc/free5gc/issues/771

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.