VDB
GO-2026-4758
GO-2026-4758
PUBLISHED
free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request in github.com/free5gc/udm
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | free5gc/udm | 0, 0 |
Timeline
- Mar 23, 2026 CVE Published
- Mar 23, 2026 CVE Updated
- May 1, 2026 Security Advisory
References
- https://github.com/free5gc/free5gc/security/advisories/GHSA-958m-gxmc-mccm advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-33065 advisory
- https://github.com/free5gc/udm/commit/88de9fa74a1b3f3522e53b4cfa2d184712ffa4ee patch
- https://github.com/free5gc/udm/pull/79 patch
- https://github.com/free5gc/free5gc/issues/783 url