Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-60632 · ADVISORY
• free5gc/free5gc · WEB
• free5gc/pcf#53 · WEB
• free5gc/free5gc · WEB
• free5gc/pcf · PACKAGE
• GitHub Advisory GHSA-vgq7-9r5r-j9v3 · ADVISORY

github.com/free5gc/pcf のその他の脆弱性

• CVE-2026-44317中 6.5free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-policyauthorization/v1/app-session…
• CVE-2026-44316高 7.5free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-smpolicycontrol/v1/sm-policies han…
• CVE-2026-42083高 8.2free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, PCF Npcf_SMPolicyControl missing authentication middleware …
• CVE-2026-41135高 7.5free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. A memo…