PT-2026-26184 · Free5Gc · Free5Gc

Zfei10990-Cmd · Published 2026-03-18 · Updated 2026-03-27 · CVE-2026-33062

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions free5GC versions prior to 1.4.2

Description This issue is an Improper Input Validation leading to Denial of Service in free5GC NRF. All deployments of free5GC using the NRF discovery service are affected. The EncodeGroupId function attempts to access array indices [0],[1],[2] without validating the length of the split data. When the group-id-list parameter contains insufficient separator characters in an HTTP GET request, the code panics with an "index out of range" error. A remote attacker can cause the NRF service to panic and crash by sending a crafted HTTP GET request with a malformed group-id-list parameter, resulting in a complete denial of service for the NRF discovery service. The API endpoint involved is the NRF API.

Recommendations free5GC versions prior to 1.4.2: Apply the provided patch or restrict access to the NRF API to trusted sources only.

Exploit

Fix

DoS

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-33062

GHSA-7C47-XR7Q-P6HG

GO-2026-4756

SUSE-SU-2026:1135-1

Affected Products

Free5Gc

References · 153

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33062.json · Exploit
• 🔥 https://github.com/free5gc/free5gc/issues/777 · Exploit
• https://github.com/free5gc/free5gc/security/advisories/GHSA-7c47-xr7q-p6hg · Vendor Advisory
• https://github.com/free5gc/nrf/pull/80 · Patch
• https://github.com/free5gc/nrf/commit/dac77d8f8f2e0f041c5634fb3c685dcb9734b872 · Patch
• https://osv.dev/vulnerability/CVE-2026-33062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33062 · Security Note
• https://osv.dev/vulnerability/GO-2026-4756 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1135-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7c47-xr7q-p6hg · Vendor Advisory
• https://github.com/free5gc/free5gc · Note
• https://suse.com/security/cve/CVE-2026-33216 · Note
• https://suse.com/security/cve/CVE-2026-32285 · Note
• https://suse.com/security/cve/CVE-2026-32938 · Note
• https://suse.com/security/cve/CVE-2026-24516 · Note