Vulnerability Description
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm (Subscriber Data Management) service. An unauthenticated attacker can inject control characters into the SUPI parameter, causing UDM to forward a malformed request to UDR and return a 500 Internal Server Error response that exposes internal infrastructure details. This vulnerability is fixed in 4.2.2.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Free5Gc | Free5Gc | < 4.2.2 |
Related Weaknesses (CWE)
References
- https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfrExploitMitigationVendor Advisory
- https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfrExploitMitigationVendor Advisory
FAQ
What is CVE-2026-42459?
CVE-2026-42459 is a vulnerability with a CVSS score of 7.5 (HIGH). free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm (Subscriber Dat...
How severe is CVE-2026-42459?
CVE-2026-42459 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-42459?
Check the references section above for vendor advisories and patch information. Affected products include: Free5Gc Free5Gc.