PT-2026-6668 · Free5Gc · Free5Gc

Linziyu · Publicado 2026-02-06 · Atualizado 2026-02-06 · CVE-2026-1975

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Free5GC versions prior to 4.1.1

Description A security flaw exists in Free5GC up to version 4.1.0. The issue resides in the identityTriggerType function within the pfcp reports.go file, leading to a null pointer dereference. This can be exploited remotely. The exploit has been publicly released and may be used in attacks.

Recommendations Versions prior to 4.1.1 should be updated.

Exploit

Correção

Improper Resource Release

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-404

CWE-476

Identificadores relacionados

CVE-2026-1975

Produtos afetados

Free5Gc

Referências · 13

• 🔥 https://github.com/free5gc/free5gc/issues/814#issue-3831993593 · Exploit
• 🔥 https://vuldb.com/?submit.743238 · Exploit
• https://github.com/free5gc/free5gc/issues/814 · Aviso do Fabricante
• https://github.com/free5gc/smf/pull/189 · Correção
• https://t.me/cveNotify/151081 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-1975 · Aviso do Fabricante
• https://vuldb.com/?id.344497 · Nota
• https://twitter.com/VulmonFeeds/status/2019669612984475674 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2019618721741041866 · Publicação no Twitter
• https://github.com/free5gc/free5gc · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1975 · Nota de Segurança
• https://t.me/CVEtracker/43885 · Publicação no Telegram
• https://vuldb.com/?ctiid.344497 · Nota