VULNERABILITY INTELLIGENCE

CVE-2026-1974

CVSS score5.3 MEDIUM

EPSS probability0.58%

CISA KEVNot currently listed

Published2026-02-06

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

A vulnerability was identified in Free5GC up to 4.1.0. This affects the function ResolveNodeIdToIp of the file internal/sbi/processor/datapath.go of the component SMF. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. It is recommended to apply a patch to fix this issue.

Weakness classification

cna@vuldb.com: CWE-404

Primary references

cna@vuldb.com — Product
cna@vuldb.com — Exploit, Issue Tracking, Vendor Advisory
cna@vuldb.com — Exploit, Issue Tracking, Vendor Advisory
cna@vuldb.com — Issue Tracking
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Exploit, Third Party Advisory, VDB Entry