{"action":"Upgrade github.com/free5gc/free5gc to 4.2.2+incompatible or later.","affected":[{"fixed":"4.2.2+incompatible","introduced":"0"}],"component":"github.com/free5gc/free5gc","cve_ids":["CVE-2026-55068"],"ecosystem":"Go","epss":0.0059,"exploited":false,"fixed_versions":["4.2.2+incompatible"],"ghsa_id":"GHSA-x8mj-6p3q-g5pp","id":"tcs_01M5KGT64P0MAZCAW2B2P78F5G","modified_at":"2026-09-02T19:45:12.643603183Z","published_at":"2026-09-02T18:37:27Z","references":["https://osv.dev/vulnerability/GO-2026-6316","https://github.com/free5gc/free5gc/security/advisories/GHSA-x8mj-6p3q-g5pp","https://github.com/free5gc/free5gc/issues/1056","https://github.com/free5gc/free5gc/releases/tag/v4.2.3","https://github.com/free5gc/nrf/commit/bda0cf75be5556bb4c758c8b34710f3fe6bbe3ea","https://github.com/free5gc/nrf/commit/fcd3cfaa27cc4dc17172ee0c4c3e0a3a696297c6","https://github.com/free5gc/nrf/pull/90","https://github.com/free5gc/nrf/releases/tag/v1.4.5"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GO-2026-6316","url":"https://osv.dev/vulnerability/GO-2026-6316"},{"source":"nvd","source_id":"CVE-2026-55068","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55068"}],"summary":"free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints in github.com/free5gc/free5gc"}