Medium severity · published Feb 23, 2026
CVE-2025-69208
free5GC UDR's NEF incorrectly returns 500 for missing PFD data (UDR 404) in Nnef_PfdManagement GET request
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Versions prior to 1.4.1 contain an Improper Error Handling vulnerability with Information Exposure. All deployments of free5GC using the Nnef_PfdManagement service may be affected. The NEF component reliably leaks internal parsing errors (e.g., invalid character 'n' after top-level value) to remote clients. This can aid attackers in fingerprinting server software and logic flows. Version 1.4.1 fixes the issue. There is no direct workaround at the application level. The recommended mitigation is to apply the provided patch.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UD
udr · free5gc
< 1.4.1 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-69208
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-69208
Exploit
https://github.com/free5gc/free5gc/issues/753
Patch
https://github.com/free5gc/free5gc/security/advisories/GHSA-f3pc-w7jp-4jh2
Patch
https://github.com/free5gc/udr/commit/91bb34bd96e1c89b3fddca80db8b90049da61ebb
Issue Tracking
https://github.com/free5gc/udr/pull/56
More from udr
5.8
CVE-2026-40343
free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation
5.3
CVE-2026-27643
free5GC has improper error handling in NEF with information exposure
5.3
CVE-2025-69253
free5GC vulnerable to improper error handling in NEF with information exposure
