F
Vendor security profile
free5gc
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical1
CISA KEV0
Public exploit5
Patch rate%71
Avg. CVSS6.4
12-month vulnerability rate
0
0
0
0
0
1
0
0
1
3
2
0
CVE KEV
CVE severity distribution
7toplam CVE
Critical1 (14%)
High1 (14%)
Medium3 (43%)
Low2 (29%)
Patch and exploitation view
%71
Verified patch
%0
CISA KEV
%71
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
6.9
CVE-2026-47780
free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistence
F
Patch status unknownEPSS %1
3.7
CVE-2026-55785
free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
F
Patch verifiedEPSS %0
7.5
CVE-2026-55784
free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI
F
Patch status unknownEPSS %0
9.3
CVE-2026-55068
free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints
F
Patch verifiedEPSS %1
6.9
CVE-2026-53551
free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure
F
Patch verifiedEPSS %1
3.7
CVE-2026-5360
Vulnerability in Free5gc
F
Patch verifiedEPSS %1