CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 30, 2026, 5:23 AM ET)

What this means for you

This week: 3,335 CVEs published, 225 critical, and 2 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,335; Show in the list
Critical, last 7 days: 225; Show in the list
Healthcare-tagged, last 7 days: 3; Show in the list
Known exploited (CISA KEV): 1,764; Show in the list

Showing CVEs that name the product free5gc:free5gc. Show all products

62 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2025-63679	Critical 9.8	free5gc v4.1.0 and before is vulnerable to Buffer Overflow. Assigned by mitre	Nov 11, 2025
CVE-2025-60638	High 7.5	An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssf_NSSAIAvailability API. Assigned by mitre	Nov 23, 2025
CVE-2025-60633	Medium 6.5	An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API. Assigned by mitre	Nov 23, 2025
CVE-2025-60632	Medium 6.5	An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicyControl API. Assigned by mitre	Nov 23, 2025
CVE-2025-65562	High 7.5	The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests. Assigned by mitre	Dec 17, 2025
CVE-2025-65561	High 7.5	An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via crafted header Local SEID to the PFCP Session Modi… Assigned by mitre	Dec 17, 2025
CVE-2026-1682	Medium 5.3	Free5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereference Assigned by VulDB	Jan 30, 2026
CVE-2026-1683	Medium 5.3	Free5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of service Assigned by VulDB	Jan 30, 2026
CVE-2026-1684	Medium 5.3	Free5GC SMF PFCP UDP Endpoint pfcp_reports.go HandleReports denial of service Assigned by VulDB	Jan 30, 2026
CVE-2026-1973	Medium 5.3	Free5GC SMF establishPfcpSession null pointer dereference Assigned by VulDB	Feb 5, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.