free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints in github.com/free5gc/free5gc
free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints in github.com/free5gc/free5gc
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-55068US | — | — | ||
free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/{nfInstanceID} accepts NF… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/free5gc/free5gc/issues/1056REPORT
- https://github.com/free5gc/free5gc/releases/tag/v4.2.3WEB
- https://github.com/free5gc/free5gc/security/advisories/GHSA-x8mj-6p3q-g5ppADVISORY
- https://github.com/free5gc/nrf/commit/bda0cf75be5556bb4c758c8b34710f3fe6bbe3eaWEB
- https://github.com/free5gc/nrf/commit/fcd3cfaa27cc4dc17172ee0c4c3e0a3a696297c6WEB
- https://github.com/free5gc/nrf/pull/90WEB
- https://github.com/free5gc/nrf/releases/tag/v1.4.5WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan