← back
CVE-2026-5661

Free5GC NGSetupRequest denial of service

CVSS 6.9 MEDIUMEPSS 0.4%CWE-404
A vulnerability was identified in Free5GC 4.2.0. This affects an unknown function of the component NGSetupRequest Handler. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
n/a · Free5GC
public PoCs found — 1
cve_referencegithub.com/user-attachments/files/25581199/amfcfg.yamlunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/free5gc/amf/pull/201https://github.com/free5gc/free5gc/https://github.com/free5gc/free5gc/issues/832https://github.com/user-attachments/files/25581199/amfcfg.yamlhttps://vuldb.com/submit/785896https://vuldb.com/vuln/355485https://vuldb.com/vuln/355485/cti