PT-2026-21562 · Free5Gc · Free5Gc Udr

Published 2026-02-23 · Updated 2026-02-25 · CVE-2025-69208

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions free5GC UDR versions prior to 1.4.1

Description The free5GC UDR, a user data repository for the free5GC 5G mobile core network project, contains an Improper Error Handling issue that can lead to Information Exposure. Deployments utilizing the Nnef PfdManagement service may be affected. The NEF component reveals internal parsing errors to remote clients, potentially aiding attackers in fingerprinting the server software and understanding its logic flows. The vulnerability is due to the component reliably leaking internal parsing errors, such as invalid characters, to remote clients.

Recommendations Update to version 1.4.1 or later.

Exploit

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2025-69208

GHSA-F3PC-W7JP-4JH2

Affected Products

Free5Gc Udr

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69208.json · Exploit
• https://github.com/free5gc/free5gc/issues/753 · Vendor Advisory
• https://github.com/free5gc/free5gc/security/advisories/GHSA-f3pc-w7jp-4jh2 · Vendor Advisory
• https://github.com/free5gc/udr/pull/56 · Patch
• https://github.com/free5gc/udr/commit/91bb34bd96e1c89b3fddca80db8b90049da61ebb · Patch
• https://osv.dev/vulnerability/CVE-2025-69208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69208 · Security Note
• https://twitter.com/VulmonFeeds/status/2026123131107070176 · Twitter Post
• https://twitter.com/CVEnew/status/2026184684422775273 · Twitter Post
• https://t.me/CVEtracker/45523 · Telegram Post
• https://twitter.com/transilienceai/status/2026137706363809973 · Twitter Post
• https://t.me/cveNotify/153167 · Telegram Post