CVE-2026-1976

Published: Feb 6, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

A weakness has been identified in Free5GC up to 4.1.0. Affected is the function SessionDeletionResponse of the component SMF. This manipulation causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. It is suggested to install a patch to address this issue.

Affected (1)

Products: Free5gc: Free5gc

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Free5gc Free5gc	Up to 4.1.0

Related CWEs

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (7)

https://github.com/free5gc/free5gc/

Source: cna@vuldb.com

Product

https://github.com/free5gc/free5gc/issues/817

Source: cna@vuldb.com

ExploitIssue TrackingVendor Advisory

https://github.com/free5gc/free5gc/issues/817#issue-3832188092

Source: cna@vuldb.com

ExploitIssue TrackingVendor Advisory

https://github.com/free5gc/smf/pull/189

Source: cna@vuldb.com

Issue Tracking

https://vuldb.com/?ctiid.344498

Source: cna@vuldb.com

Permissions RequiredVDB Entry

https://vuldb.com/?id.344498

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.743239

Source: cna@vuldb.com

ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.