free5GC: Improper Input Validation and Generation of Error Message Containing Sensitive Information in github.com/free5gc/udm

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-42459 · Microsoft / collected KEV context

EUVD-2026-32554

GHSA-585v-hcgf-jhfr

GO-2026-5138

cve-program · CVE-2026-42459

• https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr

euvd · EUVD-2026-32554

• https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr

nvd · CVE-2026-42459

• https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr

osv · GHSA-585v-hcgf-jhfr

• https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr
• https://github.com/free5gc/free5gc/security/advisories/GHSA-h4wg-rp7m-8xx4
• https://nvd.nist.gov/vuln/detail/CVE-2026-42459
• https://github.com/free5gc/free5gc
• https://github.com/free5gc/udm/blob/v1.4.3/internal/sbi/api_subscriberdatamanagement.go

osv · GO-2026-5138

• https://github.com/free5gc/free5gc/security/advisories/GHSA-585v-hcgf-jhfr
• https://nvd.nist.gov/vuln/detail/CVE-2026-42459
• https://github.com/free5gc/free5gc/security/advisories/GHSA-h4wg-rp7m-8xx4
• https://github.com/free5gc/udm/blob/v1.4.3/internal/sbi/api_subscriberdatamanagement.go

No related operational record is retained in the current change model.