F
Vendor security profile
free5gc
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical1
CISA KEV0
Public exploit7
Patch rate%56
Avg. CVSS6.7
12-month vulnerability rate
0
2
0
0
0
1
0
0
1
3
2
0
CVE KEV
CVE severity distribution
9toplam CVE
Critical1 (11%)
High3 (33%)
Medium3 (33%)
Low2 (22%)
Patch and exploitation view
%56
Verified patch
%0
CISA KEV
%78
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
6.9
CVE-2026-47780
free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistence
F
Patch status unknownEPSS %1
3.7
CVE-2026-55785
free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
F
Patch verifiedEPSS %0
7.5
CVE-2026-55784
free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI
F
Patch status unknownEPSS %0
9.3
CVE-2026-55068
free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints
F
Patch verifiedEPSS %1
6.9
CVE-2026-53551
free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure
F
Patch verifiedEPSS %1
3.7
CVE-2026-5360
Vulnerability in Free5gc
F
Patch verifiedEPSS %1
7.5
CVE-2025-65562
Vulnerability in Free5gc
F
Patch status unknownEPSS %1
7.5
CVE-2025-65561
Improper input validation in Free5gc
F
Patch status unknownEPSS %0