CVE-2026-1976

Katalog CVE

CVSS 7.5 · High EPSS 0,61%

Kerentanan Improper Resource Shutdown or Release pada free5gc. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A weakness has been identified in Free5GC up to 4.1.0. Affected is the function SessionDeletionResponse of the component SMF. This manipulation causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. It is suggested to install a patch to address this issue.

Rincian

Terbit di NVD

6 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release
CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,61% peluang dieksploitasi; lebih tinggi dari 47,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/free5gc/free5gc/issues/817 exploit · issue tracking · advisory vendor
• https://github.com/free5gc/free5gc/issues/817#issue-3832188092 exploit · issue tracking · advisory vendor
• https://vuldb.com/?id.344498 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.743239 exploit · advisory pihak ketiga · vdb entry
• https://github.com/free5gc/free5gc/ product
• https://github.com/free5gc/smf/pull/189 issue tracking
• https://vuldb.com/?ctiid.344498 permissions required · vdb entry