CVE-2026-1739

Katalog CVE

CVSS 7.5 · High EPSS 0,78%

Kerentanan Improper Resource Shutdown or Release pada free5gc pcf. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/smpolicy.go. The manipulation leads to null pointer dereference. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is df535f5524314620715e842baf9723efbeb481a7. Applying a patch is the recommended action to fix this issue.

Rincian

Terbit di NVD

2 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release
CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,78% peluang dieksploitasi; lebih tinggi dari 54,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/free5gc/pcf/commit/df535f5524314620715e842baf9723efbeb481a7 patch
• https://github.com/free5gc/free5gc/issues/803 exploit · issue tracking · advisory pihak ketiga
• https://github.com/free5gc/free5gc/issues/803#issue-3815770007 exploit · issue tracking · advisory pihak ketiga
• https://vuldb.com/?id.343638 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.741194 advisory pihak ketiga · vdb entry
• https://github.com/free5gc/pcf/ product
• https://github.com/free5gc/pcf/pull/62 issue tracking
• https://vuldb.com/?ctiid.343638 permissions required · vdb entry