CVE-2026-26024

HIGH 7.5CVE-2026-26024 · Published 24/02/2026 · updated 17/06/2026

In short

CVE-2026-26024 is a HIGH (CVSS 7.5) vulnerability affecting smf (free5gc).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
smf free5gc	`≤ 1.4.1`	No fix yet

Description

free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics and terminates when processing a malformed PFCP SessionReportRequest on the PFCP (UDP/8805) interface. No known upstream fix is available, but some workarounds are available. ACL/firewall the PFCP interface so only trusted UPF IPs can reach SMF (reduce spoofing/abuse surface); drop/inspect malformed PFCP SessionReportRequest messages at the network edge where feasible, and/or add recover() around PFCP handler dispatch to avoid whole-process termination (mitigation only).

References

free5gc/free5gc · Exploit
free5gc/free5gc security advisory · Vendor Advisory

More vulnerabilities in smf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

smf

free5gc

≤ 1.4.1

No fix yet

Description

More vulnerabilities in smf

See all →