Go/github.com/free5gc/udr CVE-2026-47780: unknown, EPSS 0.54%

free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence in github.com/free5gc/udr

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5178
• https://github.com/free5gc/free5gc/security/advisories/GHSA-6gxq-gpr8-xgjp

CVE-2026-47780 · published 2026-06-25T18:26:48Z · modified 2026-06-25T18:45:19.480780814Z · JSON