Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, remote attackers can inject control characters (e.g., %00) into the supi parameter, triggering internal URL parsing errors (net/url: invalid control character). This exposes system-level error details and can be used for service fingerprinting. All deployments of free5GC using the UDM Nudm_UEAU service may be affected. free5gc/udm pull request 75 contains a fix for the issue. No direct workaround is available at the application level. Applying the official patch is recommended.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-24 | 2 | Disclosure1General1 |
| 2026-02-27 | 1 | General1 |
| 2026-02-28 | 1 | General1 |
| 2026-03-01 | 1 | General1 |
| 2026-05-07 | 1 | Disclosure1 |
CVE-2026-27642 URL Parsing Vulnerability in free5gc UDM Service Enabling Information Disclosure https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27642
Post summary
A URL parsing vulnerability in the free5gc UDM service that can lead to information disclosure has been disclosed as CVE-2026-27642.
🟠 free5GC UDM, Input Validation Bypass, #CVE-2026-27642 (Medium) https://dailycve.com/free5gc-udm-input-validation-bypass-cve-2026-27642-medium/
Post summary
CVE-2026-27642 describes an input validation bypass in free5GC UDM. The post provides the vulnerability type and severity but does not mention exploits, patches, or active attacks.
CVE-2026-27642 (CVSS:6.6, HIGH) is Analyzed. free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile co..https://nvd.nist.gov/vuln/detail/CVE-2026-27642 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2026-27642 with its CVSS score and notes it has been analyzed, but provides no further technical or exploit details.
CVE-2026-27642 (CVSS:6.6, HIGH) is Analyzed. free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile co..https://nvd.nist.gov/vuln/detail/CVE-2026-27642 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post merely references CVE-2026-27642 with its CVSS score and a link to the NVD, lacking any technical depth or exploitation evidence.
CVE-2026-27642 (CVSS:6.6, HIGH) is Analyzed. free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile co..https://nvd.nist.gov/vuln/detail/CVE-2026-27642 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post notes CVE‑2026‑27642 and its CVSS score but offers no details on exploitation, mitigation, or PoC.
CVE-2026-27642 free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1… https://www.cve.org/CVERecord?id=CVE-2026-27642
Post summary
The text only references CVE-2026-27642 and the affected free5gc UDM component, without offering additional details or actionable information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | free5gc | udm | - | go | - |