CVE-2026-33192 Details
Description
Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Request (from UDR) into a 500 Internal Server Error when handling PATCH requests with an empty supi path parameter. Additionally, the UDM incorrectly translates the PATCH method to PUT when forwarding to UDR, indicating a deeper architectural issue. This leaks internal error handling behavior, making it difficult for clients to distinguish between client-side errors and server-side failures. The issue has been patched in version 1.4.2.
A vulnerability exists in Free5GC UDM versions prior to 1.4.2, where the UDM incorrectly handles PATCH requests to the sdm-subscriptions endpoint with an empty supi path parameter. This mismanagement converts a 400 Bad Request response from the UDR into a 500 Internal Server Error, obscuring the nature of the error for clients. Additionally, the UDM mistakenly translates PATCH requests into PUT when forwarding to UDR, revealing a deeper architectural flaw. This issue exposes internal error handling practices, complicating clients' ability to differentiate between client-side and server-side errors.
Users should upgrade to Free5GC version 1.4.2 or later, where this issue has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 20, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/free5gc/free5gc/issues/784 | [email protected] | ExploitIssue TrackingPatchVendor Advisory |
| https://github.com/free5gc/free5gc/security/advisories/GHSA-5rvc-5cwx-g5x8 | [email protected] | PatchVendor Advisory |
| https://github.com/free5gc/udm/pull/79 | [email protected] | Issue TrackingPatch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-209 | Generation of Error Message Containing Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| free5gc udm | < 1.4.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 23, 2026 | Reanalysis | [email protected] |
| Mar 23, 2026 | Initial Analysis | [email protected] |
| Mar 20, 2026 | New CVE Received | [email protected] |