CVE-2026-42459 Details
Description
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm (Subscriber Data Management) service. An unauthenticated attacker can inject control characters into the SUPI parameter, causing UDM to forward a malformed request to UDR and return a 500 Internal Server Error response that exposes internal infrastructure details. This vulnerability is fixed in 4.2.2.
A vulnerability exists in the free5GC UDM component, specifically in versions through 4.2.1, within the nudm-sdm (Subscriber Data Management) service. The issue arises because the UDM component fails to properly validate the 'supi' path parameter in six GET handlers. This lack of validation allows an unauthenticated attacker to inject control characters into the SUPI parameter, leading UDM to forward a malformed request to the UDR (User Data Repository). As a result, UDM responds with a 500 Internal Server Error, disclosing internal infrastructure details. This vulnerability is a continuation of a previous issue addressed in CVE-2026-27642, which only partially applied the necessary validation.
Users are advised to update to free5GC version 4.2.2, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
| CWE-209 | Generation of Error Message Containing Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| free5gc free5gc | < 4.2.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 28, 2026 | Initial Analysis | [email protected] |
| May 28, 2026 | CVE Modified | CISA-ADP |
| May 27, 2026 | New CVE Received | [email protected] |