CVE-2026-30063

Free5GC NF Discovery Denial of Service Vulnerability

Published Aug 27, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted snssais query.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Free5GC NF Discovery Denial of Service Vulnerability
Type Values Removed Values Added
Title Denial of Service via Crafted snssais Query in free5gc NF Discovery Endpoint
Weaknesses CWE-400
Type Values Removed Values Added
Weaknesses CWE-770
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Denial of Service via Crafted snssais Query in free5gc NF Discovery Endpoint
First Time appeared Free5gc
Free5gc free5gc
Weaknesses CWE-400
Vendors & Products Free5gc
Free5gc free5gc
Type Values Removed Values Added
Description An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted snssais query.
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 31, 2026, 4:19 PM
Reserved
Mar 4, 2026, 12:00 AM
Status
Deferred
Published
Aug 27, 2026, 5:17 PM
Modified
Aug 31, 2026, 8:59 PM