Unrated severityNVD Advisory· Published Feb 16, 2026· Updated Feb 23, 2026

Free5GC PFCP UDP Endpoint denial of service

CVE-2026-2525

Description

A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Free5gc/Free5gcv52 versions
cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:free5gc:free5gc:*:*:*:*:*:*:*:*range: 4.0
- (no CPE)range: <=4.1.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/free5gc/free5gc/issues/796mitreexploitissue-tracking
vuldb.commitrethird-party-advisory
github.com/free5gc/free5gc/issues/796mitreissue-tracking
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000