Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Request (from UDR) into a 500 Internal Server Error when handling PATCH requests with an empty supi path parameter. Additionally, the UDM incorrectly translates the PATCH method to PUT when forwarding to UDR, indicating a deeper architectural issue. This leaks internal error handling behavior, making it difficult for clients to distinguish between client-side errors and server-side failures. The issue has been patched in version 1.4.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-20 | 2 | Disclosure1Patch1 |
| 2026-03-22 | 1 | Disclosure1 |
| 2026-03-25 | 1 | Disclosure1 |
CVE-2026-33192 in `free5GC UDM` causes HTTP 500 errors for empty `supi` parameters in `PATCH` requests, potentially leading to service instability. Monitor for official patches. #5Gsecurity #APIsecurity https://www.pulsepatch.io/posts/cve-2026-33192-free5gc-udm-http-500-error
Post summary
The message announces CVE-2026-33192 in free5GC UDM, describing the error behavior and encouraging monitoring for vendor patches.
CVE-2026-33192 Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream… https://www.cve.org/CVERecord?id=CVE-2026-33192
Post summary
The text announces CVE-2026‑33192 affecting Free5GC UDM before version 1.4.2, notes a conversion error, but provides no PoC, exploit, or patch details.
CVE-2026-33192 Free5GC UDM Improper Error Handling and Method Translation Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33192
Post summary
A newly disclosed vulnerability, CVE‑2026‑33192, affects Free5GC UDM via improper error handling and method translation; no exploit, patch, or active exploitation details are provided.
[CVE-2026-33192: HIGH] Free5GC project addresses critical UDM software vulnerabilities in 5G networks. Update to version 1.4.2 to patch issues translating HTTP responses and prevent error leakages.#cve,CVE-2026-33192,#cybersecurity https://cvefind.com/CVE-2026-33192
Post summary
Free5GC released version 1.4.2 to patch critical UDM software vulnerabilities affecting HTTP response translation and error leakages.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | free5gc | udm | - | go | - |