VYPR
Medium severity5.3OSV Advisory· Published Jan 30, 2026· Updated Jun 17, 2026

CVE-2026-1683

CVE-2026-1683

Description

A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the function HandlePfcpSessionReportRequest of the file internal/pfcp/handler/handler.go of the component PFCP. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. To fix this issue, it is recommended to deploy a patch.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Free5gc/Free5gcOSV2 versions
    v3.0.5, v3.0.6, v3.0.7, …+ 1 more
    • (no CPE)range: v3.0.5, v3.0.6, v3.0.7, …
    • cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*range: <=4.1.0
  • Free5gc/SMFllm-create
    Range: <=4.1.0

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.