CVE-2026-4531
A weakness has been identified in Free5GC 4.1.0. Affected is the function HandleRegistrationComplete of the file internal/gmm/handler.go of the component AMF. Executing a manipulation can lead to denial of service. The attack may be performed from remote. This patch is called 52e9386401ce56ea773c5aa587d4cdf7d53da799. It is best practice to apply a patch to resolve this issue.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.9
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X
- EPSS probability
- 0.43%
- CWE
- CWE-404
- Published
- 2026-03-22
- Last modified
- 2026-03-23
Affected products
- n/a Free5GC
Weakness type
Related vulnerabilities
- CVE-2026-29771 — Netmaker: Denial of Service via Server Shutdown Endpoint
- CVE-2026-1876 — Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet module
- CVE-2026-41869 — Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)
- CVE-2026-1875 — Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module
- CVE-2026-11317 — Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP
- CVE-2026-10069 — Shibby Tomato miniupnpd resource consumption
- CVE-2026-45174 — Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization
- CVE-2026-4240 — Open5GS CCA smf_s6b_sta_cb denial of service