CVE-2026-40248 | Free5GC up to 1.4.2 UDR Service notificationUri improper authorization (GHSA-jgq2-qv8v-5cmj)

April 17, 2026 Yanac

A vulnerability marked as critical has been reported in Free5GC up to 1.4.2. This issue affects some unknown processing of the component UDR Service. The manipulation of the argument notificationUri leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-40248. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More