Denial of Service Vulnerability in free5gc Registration Handler
CVE-2026-30069

7.5HIGH

Key Information:

Vendor

free5gc

Status
free5gc
Vendor
CVE Published:
27 August 2026

What is CVE-2026-30069?

A vulnerability exists in the UDMC registration handler of free5gc v4.0.1, where a NULL pointer dereference can be exploited. By sending specially crafted payloads to the handler, attackers can trigger a Denial of Service (DoS) condition, interrupting the normal operation of the application. This flaw exposes systems to potential service disruptions, emphasizing the need for immediate attention to mitigate risks associated with this vulnerability.

References

https://github.com/free5gc/free5gc/issues/761

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.