Go/github.com/free5gc/udr CVE-2026-47780: medium 6.9, EPSS 0.54%
free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-6gxq-gpr8-xgjp
- nvd: CVE-2026-47780
- https://github.com/free5gc/free5gc/security/advisories/GHSA-6gxq-gpr8-xgjp
- https://github.com/free5gc/free5gc
CVE-2026-47780 · published · modified · JSON