{"id":"EUVD-2026-32554","enisaUuid":"76fa417f-cdd7-3a50-81b5-4a945ed75826","description":"free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm (Subscriber Data Management) service. An unauthenticated attacker can inject control characters into the SUPI parameter, causing UDM to forward a malformed request to UDR and return a 500 Internal Server Error response that exposes internal infrastructure details. This vulnerability is fixed in 4.2.2.","datePublished":"May 27, 2026, 3:53:45 PM","dateUpdated":"May 28, 2026, 2:14:46 PM","baseScore":7.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","references":"https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr\n","aliases":"CVE-2026-42459\nGHSA-585v-hcgf-jhfr\n","assigner":"GitHub_M","epss":0.32,"enisaIdProduct":[{"id":"668c9448-1390-3457-b16d-3bfba5de3976","product":{"name":"Free5GC","vendor":{"name":"Free5Gc"}},"product_version":"\u003c 4.2.2"}],"enisaIdVendor":[{"id":"9e365c40-5e6a-35b6-ba5e-2c575352e913","vendor":{"name":"Free5Gc"}}],"enisaIdVulnerability":[{"id":"5b393cfe-8002-3b0b-bdbc-13f829fc453d","vulnerability":{"id":"CVE-2026-42459","description":"free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm (Subscriber Data Management) service. An unauthenticated attacker can inject control characters into the SUPI parameter, causing UDM to forward a malformed request to UDR and return a 500 Internal Server Error response that exposes internal infrastructure details. This vulnerability is fixed in 4.2.2.","datePublished":"May 27, 2026, 3:53:45 PM","dateUpdated":"May 28, 2026, 2:14:46 PM","status":"PUBLISHED","baseScore":7.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","references":"https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr\n","enisa_id":"EUVD-2026-32554\n","assigner":"GitHub_M","epss":0.32,"dataProcessed":"Oct 27, 2026, 7:17:29 AM","vulnerabilityProduct":[{"id":"9406e019-d07f-3aa6-a465-e859cbf1f61e","product":{"name":"Free5GC","vendor":{"name":"Free5Gc"}},"product_version":"\u003c 4.2.2"}],"vulnerabilityVendor":[{"id":"ee94fb0b-e3ae-310c-9efc-307ada2af6f7","vendor":{"name":"Free5Gc"}}]}},{"id":"c6661699-4341-301c-ad99-3747d4487191","vulnerability":{"id":"GHSA-585v-hcgf-jhfr","description":"Free5GC UDM has Improper Input Validation and Generation of Error Messages Containing Sensitive Information","datePublished":"May 7, 2026, 2:09:58 AM","dateUpdated":"Jun 8, 2026, 11:46:57 PM","baseScore":0.0,"references":"https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr\nhttps://github.com/free5gc/free5gc/security/advisories/GHSA-h4wg-rp7m-8xx4\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-42459\nhttps://github.com/free5gc/free5gc\nhttps://github.com/free5gc/udm/blob/v1.4.3/internal/sbi/api_subscriberdatamanagement.go\n","enisa_id":"EUVD-2026-32554\n","aliases":"GHSA-585v-hcgf-jhfr\nCVE-2026-42459\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}