CVE-2026-2525

MEDIUM

Free5GC <=4.1.0 - DoS

Title source: llm
STIX 2.1

Description

A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Scores

CVSS v3 5.3
EPSS 0.0011
EPSS Percentile 28.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (1)
free5gc/free5gc < 4.1.0
Published Feb 16, 2026
Tracked Since Feb 18, 2026