Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf versions up to and including 1.2.6, corresponding to free5gc smf up to and including 1.4.0, have an Improper Input Validation and Protocol Compliance vulnerability leading to Denial of Service. Remote attackers can disrupt core network functionality by sending a malformed PFCP Association Setup Request. The UPF incorrectly accepts it, entering an inconsistent state that causes subsequent legitimate requests to trigger SMF reconnection loops and service degradation. All deployments of free5GC using the UPF and SMF components may be affected. As of time of publication, a fix is in development but not yet available. No direct workaround is available at the application level. Applying the official patch, once released, is recommended.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-24 | 2 | Disclosure1General1 |
| 2026-02-27 | 1 | General1 |
| 2026-02-28 | 1 | Disclosure1 |
CVE-2025-69232 Denial of Service in free5GC UPF via Malformed PFCP Association Setup Request https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-69232
Post summary
A Denial of Service vulnerability (CVE-2025-69232) in free5GC UPF due to malformed PFCP Association Setup Requests has been disclosed.
CVE-2025-69232 (CVSS:2.7, HIGH) is Analyzed. free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf versions up to and includ..https://nvd.nist.gov/vuln/detail/CVE-2025-69232 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2025-69232 is a newly identified vulnerability in the free5GC go‑upf component, rated CVSS 2.7 (HIGH); the post lists the affect and score but does not provide any PoC, exploit, or patch information.
CVE-2025-69232 (CVSS:2.7, HIGH) is Analyzed. free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf versions up to and includ..https://nvd.nist.gov/vuln/detail/CVE-2025-69232 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE‑2025‑69232 with a CVSS score of 2.7 and identifies vulnerable free5GC go‑upf versions, but offers no further technical details, exploitation evidence, or remediation information.
CVE-2025-69232 free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf versions up to and including 1.2.6, corresponding to free5gc smf up to … https://www.cve.org/CVERecord?id=CVE-2025-69232
Post summary
The text only references CVE-2025-69232 and affected free5GC versions, lacking details on exploitation, patches, or technical specifics.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | free5gc | go-upf | - | go | - |
| App | free5gc | smf | - | go | - |