Skip to content
OpenAdvisories

Package · Go

github.com/free5gc/udm

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • High 7.7
    CVE-2026-42459

    free5GC: Improper Input Validation and Generation of Error Message Containing Sensitive Information in github.com/free5gc/udm

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm (Subscriber Data Management) service. An unauthenticated attacker can inje…

    free5gc free5gc github.com/free5gc/udm Go
  • High 8.7
    CVE-2026-33192

    free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques

    Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Request (from UDR) into a 500 Internal Server Error when handling PATCH requests wit…

    free5gc free5gc github.com/free5gc/udm Go
  • Medium 6.9
    CVE-2026-33065

    free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request

    Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Request (from UDR) into a 500 Internal Server Error when handling DELETE requests wi…

    free5gc free5gc github.com/free5gc/udm Go
  • High 8.7
    CVE-2026-33064

    free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference

    Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2 are vulnerable to procedure panic caused by Nil Pointer Dereference in the /sdm-subscriptions endpoint. A remote attacker can cause the UD…

    free5gc free5gc github.com/free5gc/udm Go
  • High 8.7
    CVE-2026-33191

    free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error

    Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2 are vulnerable to null byte injection in URL path parameters. A remote attacker can inject null bytes (URL-encoded as %00) into the supi p…

    free5gc free5gc github.com/free5gc/udm Go
  • Medium 6.5
    CVE-2025-60633

    Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API

    An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API.

    github.com/free5gc/udm github.com/free5gc/openapi Go
  • High 7.5
    CVE-2023-46324

    free5GC udm vulnerable to Invalid Curve Attack

    pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which…

    github.com/free5gc/udm Go