MEDIUM
Free5GC PFCP UDP Endpoint denial of service
Published Feb 16, 2026
6.9
MEDIUMCVSS 4.0
EPSS 0.52%
Description
A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
-
- Version 4.0StatusaffectedConstraints-
- Version 4.1.0StatusaffectedConstraints-
- Version
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (7)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-6138 Advisory
- https://github.com/free5gc/free5gc/ product
- https://github.com/free5gc/free5gc/issues/796 issue-trackingExploitIssue TrackingVendor Advisory
- https://github.com/free5gc/free5gc/issues/796#issue-3812169865 exploitissue-trackingIssue TrackingVendor Advisory
- https://vuldb.com/?ctiid.346113 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.346113 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.739509 third-party-advisoryThird Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-6138 | Advisory | |
| https://github.com/free5gc/free5gc/ | product | |
| https://github.com/free5gc/free5gc/issues/796 | issue-trackingExploitIssue TrackingVendor Advisory | |
| https://github.com/free5gc/free5gc/issues/796#issue-3812169865 | exploitissue-trackingIssue TrackingVendor Advisory | |
| https://vuldb.com/?ctiid.346113 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.346113 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.739509 | third-party-advisoryThird Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Feb 16, 2026
Updated Feb 23, 2026
Reserved Feb 15, 2026
Link CVE-2026-2525
CISA Vulnrichment
Updated Feb 17, 2026
ENISA EUVD
EUVD-2026-6138 Assigner VulDB
Published Feb 16, 2026
Updated Feb 23, 2026
Exploited since n/a
Link EUVD-2026-6138