CVE-2026-2525

MEDIUM

Free5GC <=4.1.0 - DoS

Title source: llm

Description

A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

References (6)

[Various Sources] https://github.com/free5gc/free5gc/

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.346113

[Permissions Required, VDB Entry] https://vuldb.com/?id.346113

[Permissions Required, VDB Entry] https://vuldb.com/?submit.739509

[Issue Tracking] https://github.com/free5gc/free5gc/issues/796

[Issue Tracking] https://github.com/free5gc/free5gc/issues/796#issue-3812169865

Scores

CVSS v3 5.3

EPSS 0.0007

EPSS Percentile 20.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Classification

CWE

CWE-404

Status published

Affected Products (1)

free5gc/free5gc < 4.1.0

Timeline

Published Feb 16, 2026

Tracked Since Feb 18, 2026