UD
Product
udm
9
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add udm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33191 | 8.6 | Mar 20 | free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error Affected: before 1.4.2 |
| CVE-2026-33064 | 7.5 | Mar 20 | free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference Affected: before 1.4.2 |
| CVE-2026-27642 | 7.5 | Feb 24 | free5GC has Improper Input Validation in UDM UEAU Service Affected: <= 1.4.1 |
| CVE-2025-69252 | 7.5 | Feb 23 | free5GC has Null Pointer Dereference in UDM, Leading to Service Panic Affected: <= 1.4.1 |
| CVE-2025-69250 | 7.5 | Feb 23 | free5GC has Improper Error Handling in UDM, Leading to Information Exposure Affected: <= 1.4.1 |
| CVE-2023-46324 | 7.5 | Oct 23 | pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key… Affected: before 1.2.0 |
| CVE-2026-33192 | 5.3 | Mar 20 | free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques Affected: before 1.4.2 |
| CVE-2026-33065 | 5.3 | Mar 20 | free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request Affected: before 1.4.2 |
| CVE-2025-69251 | 5.3 | Feb 23 | free5GC has Improper Input Validation in UDM, Leading to Information Exposure Affected: <= 1.4.1 |
Showing 9