CVE-2026-1683
Free5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of service
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the function HandlePfcpSessionReportRequest of the file internal/pfcp/handler/handler.go of the component PFCP. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. To fix this issue, it is recommended to deploy a patch.
| CWE | CWE-404 |
| Vendor | free5gc |
| Product | smf |
| Published | Jan 30, 2026 |
| Last Updated | Feb 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for free5gc smf
Be the first to know when new medium vulnerabilities affecting free5gc smf are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Free5GC / SMF
4.0 4.1.0
References
vuldb.com: https://vuldb.com/?id.343476 vuldb.com: https://vuldb.com/?ctiid.343476 vuldb.com: https://vuldb.com/?submit.739653 vuldb.com: https://vuldb.com/?submit.739654 github.com: https://github.com/free5gc/free5gc/issues/804 github.com: https://github.com/free5gc/free5gc/issues/804#issue-3816086696 github.com: https://github.com/free5gc/smf/pull/188 github.com: https://github.com/free5gc/smf/
Credits
🔍 ZiyuLin (VulDB User)