Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 §6.9.5.1. The AMF does not check for ongoing N2 handover procedures before initiating a NAS Security Mode Command, and vice versa. This can lead to mismatches between NAS and AS security contexts in the network and the UE. This vulnerability is fixed in 4.2.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 free5GC, Security Context Mismatch, #CVE-2026-42082 (Medium) -DC-May2026-37 https://dailycve.com/free5gc-security-context-mismatch-cve-2026-42082-medium-dc-may2026-37/
Post summary
The post announces the medium‑severity CVE‑2026‑42082 vulnerability in free5GC, describing a security context mismatch but provides no PoC, exploitation, patch, or claiming false positive.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | free5gc | free5gc | - | - | - |