Race Condition Vulnerability in Free5GC Gmm Handler Component
CVE-2026-94043

6.9MEDIUM

Key Information:

Vendor

Free5GC

Status
Free5gc
Vendor
CVE Published:
20 September 2026

What is CVE-2026-94043?

A vulnerability exists in Free5GC's Gmm Handler component found in the internal handler.go file. This race condition can be exploited remotely, allowing an attacker to manipulate the application's behavior. Affected versions are up to 4.2.3, and it is urged to deploy the provided patch (commit e323b01464355781b8b8d5dd695e05cbc00a62f2) to mitigate this risk effectively.

Affected Version(s)

Free5GC 4.2.0

Free5GC 4.2.1

Free5GC 4.2.2

References

https://vuldb.com/vuln/407972
vdb-entry
https://vuldb.com/vuln/407972/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-94043
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

JinboXu (VulDB User)
.