Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
free5GC is an open source 5G core network. free5GC AUSF prior to version 1.4.2 has is an Improper Null Check vulnerability leading to Denial of Service. All deployments of free5GC v4.0.1 using the AUSF UE authentication service (`/nausf-auth/v1/ue-authentications` endpoint) are affected. A remote attacker can cause the AUSF service to panic and crash by sending a crafted UE authentication request that triggers a nil interface conversion in the `GetSupiFromSuciSupiMap` function. This results in complete denial of service for the AUSF authentication service. The `GetSupiFromSuciSupiMap` function attempts to perform an interface conversion from `interface{}` to `*context.SuciSupiMap` without checking if the underlying value is nil. When `SuciSupiMap` is nil, the code panics with "interface conversion: interface {} is nil, not *context.SuciSupiMap". free5GC AUSF version 1.4.2 patches the issue. There is no direct workaround at the application level. The recommendation is to apply the provided patch or restrict access to the AUSF API to trusted sources only.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-20 | 2 | Disclosure2 |
| 2026-03-25 | 1 | Patch1 |
| 2026-08-29 | 1 | Disclosure1 |
🟠 free5GC AUSF, Timing Side Channel, #CVE-2026-33063 (Medium) -DC-Aug2026-2045 https://dailycve.com/free5gc-ausf-timing-side-channel-cve-2026-33063-medium-dc-aug2026-2045/
Post summary
The post announces a Medium‑severity timing side‑channel vulnerability (CVE‑2026‑33063) in free5GC AUSF and links to a dailycve report page, but offers no proof of concept, exploit details, or patch information.
A panic vulnerability (CVE-2026-33063) in `free5GC AUSF` can lead to a denial of service during UE authentication due to nil interface conversion. Admins should monitor for patches. #free5GC #DoS #infosec https://www.pulsepatch.io/posts/cve-2026-33063-free5gc-ausf-authentication-panic
Post summary
The post announces a denial‑of‑service CVE in free5GC AUSF, provides quick technical detail, and urges admins to keep an eye out for patches.
CVE-2026-33063 Denial of Service Vulnerability in free5GC AUSF Prior to Version 1.4.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33063
Post summary
A new CVE (CVE‑2026‑33063) has been disclosed, describing a denial‑of‑service flaw in free5GC AUSF prior to version 1.4.2; the text links to vulnerability details but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-33063 free5GC is an open source 5G core network. free5GC AUSF prior to version 1.4.2 has is an Improper Null Check vulnerability leading to Denial of Service. All deploymen… https://www.cve.org/CVERecord?id=CVE-2026-33063
Post summary
The post identifies CVE-2026-33063 as an Improper Null Check vulnerability in free5GC's AUSF component that causes denial of service, but no PoC, exploit, active exploitation, or patch is detailed.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | free5gc | free5gc | - | - | - |