CVE-2026-47780 | free5GC up to 4.2.2 SBI API Data Repository api_datarepository.go ueId input validation

September 15, 2026 Yanac

A vulnerability classified as critical has been found in free5GC up to 4.2.2. Affected is the function HandleCreateEeSubscriptions/HandleQueryeesubscriptions of the file internal/sbi/api_datarepository.go of the component SBI API Data Repository. The manipulation of the argument ueId leads to improper input validation.

This vulnerability is traded as CVE-2026-47780. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More