ByteOS Network

NVD Vulnerability Details :

CVE-2026-2525

Awaiting Analysis

Source-cna@vuldb.com

Published At-16 Feb, 2026 | 02:16

Updated At-18 Feb, 2026 | 17:52

A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.5	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Secondary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

Type: Secondary

Version: 4.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Type: Secondary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE ID	Type	Source
CWE-404	Primary	cna@vuldb.com

CWE ID: CWE-404

Type: Primary

Source: cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/free5gc/free5gc/	cna@vuldb.com	N/A
https://github.com/free5gc/free5gc/issues/796	cna@vuldb.com	N/A
https://github.com/free5gc/free5gc/issues/796#issue-3812169865	cna@vuldb.com	N/A
https://vuldb.com/?ctiid.346113	cna@vuldb.com	N/A
https://vuldb.com/?id.346113	cna@vuldb.com	N/A
https://vuldb.com/?submit.739509	cna@vuldb.com	N/A