https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 03 Sep 2026 17:13:52 +0000 https://vulnerability.circl.lu/sighting/3e594a79-97dc-49bd-ae14-fa3a8266ca7c/export {"uuid": "3e594a79-97dc-49bd-ae14-fa3a8266ca7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muaeolxf7723", "content": "CVE-2026-55784 - Auth state overwrite flaw in free5GC 5G core network AUSF component. CVSS 7.5. Unpatched, monitor for fixes and mitigate immediately. #CVE #5G #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55784/", "creation_timestamp": "2026-08-29T17:11:39.492072Z"} {"uuid": "3e594a79-97dc-49bd-ae14-fa3a8266ca7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muaeolxf7723", "content": "CVE-2026-55784 - Auth state overwrite flaw in free5GC 5G core network AUSF component. CVSS 7.5. Unpatched, monitor for fixes and mitigate immediately. #CVE #5G #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55784/", "creation_timestamp": "2026-08-29T17:11:39.492072Z"} https://vulnerability.circl.lu/sighting/3e594a79-97dc-49bd-ae14-fa3a8266ca7c/export Sat, 29 Aug 2026 17:11:39 +0000 https://vulnerability.circl.lu/sighting/59a0ec83-e60b-4fff-9308-cba46a6a2ee7/export {"uuid": "59a0ec83-e60b-4fff-9308-cba46a6a2ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117179907645538096", "content": "CVE-2026-55784 - Auth state overwrite flaw in free5GC 5G core network AUSF component. CVSS 7.5. Unpatched, monitor for fixes and mitigate immediately. #CVE #5G #infosec\nhttps://www.valtersit.com/cve/CVE-2026-55784/", "creation_timestamp": "2026-08-29T17:11:35.449311Z"} {"uuid": "59a0ec83-e60b-4fff-9308-cba46a6a2ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117179907645538096", "content": "CVE-2026-55784 - Auth state overwrite flaw in free5GC 5G core network AUSF component. CVSS 7.5. Unpatched, monitor for fixes and mitigate immediately. #CVE #5G #infosec\nhttps://www.valtersit.com/cve/CVE-2026-55784/", "creation_timestamp": "2026-08-29T17:11:35.449311Z"} https://vulnerability.circl.lu/sighting/59a0ec83-e60b-4fff-9308-cba46a6a2ee7/export Sat, 29 Aug 2026 17:11:35 +0000 https://vulnerability.circl.lu/sighting/d343130b-fe31-4606-9d1e-13b838ca6d40/export {"uuid": "d343130b-fe31-4606-9d1e-13b838ca6d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://gist.github.com/alon710/bfdbd4d8edcf6cd0b3abcf06b55c6e3d", "content": "# CVE-2026-55784: CVE-2026-55784: Concurrent Request Context Overwrite in free5GC AUSF\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55784\n\n## Summary\nA concurrency synchronization flaw (race condition) exists in the Authentication Server Function (AUSF) of the free5GC 5G core network implementation. In versions 1.4.4 and earlier, authentication contexts are stored in a global sync.Map keyed solely by the Subscriber Permanent Identifier (SUPI). If multiple concurrent authentication requests are received for the same SUPI, the active security parameters (such as keys and expected responses) are unconditionally overwritten, resulting in authentication failures for the legitimate user.\n\n## TL;DR\nA critical concurrency vulnerability (CWE-362) in free5GC AUSF allows unauthenticated network attackers to cause a denial of service (DoS) for targeted subscribers by sending concurrent authentication requests that overwrite active cryptographic session contexts.\n\n## Technical Details\n\n- **CWE ID**: CWE-362\n- **Attack Vector**: Network\n- **Attack Complexity**: Low\n- **Privileges Required**: None\n- **Impact**: Availability (High)\n- **Exploit Status**: None / Concept Only\n\n## Affected Systems\n\n- free5GC AUSF\n- **free5GC**: <= 1.4.4 (Fixed in: `Not patched`)\n\n## Mitigation\n\n- Restrict network access to the AUSF Service-Based Interface (SBI) / N12 interface via strict network firewalls or Service Mesh access policies.\n- Implement rate limiting at the API gateway or proxy layer for /nausf-auth/v1/ue-authentications endpoint based on the SUPI request attribute.\n- Incorporate composite keying in the internal implementation of free5GC to key the active session pool by both SUPI and a unique Transaction/Session ID.\n\n**Remediation Steps:**\n1. Review the internal free5GC code structure specifically inside internal/context/context.go and internal/sbi/processor/ue_authentication.go.\n2. Apply localized patches to prevent unconditional context replacement, such as adding active validation flags or converting the lookup map key to a compound identifier.\n3. Deploy mutual TLS (mTLS) configurations on the SBI to ensure only authentic Access and Mobility Management Functions (AMFs) can initiate authentication sessions.\n\n## References\n\n- [GitHub Security Advisory GHSA-334q-h5g3-fpxv](https://github.com/free5gc/free5gc/security/advisories/GHSA-334q-h5g3-fpxv)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-55784)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55784) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-29T09:32:16.539775Z"} {"uuid": "d343130b-fe31-4606-9d1e-13b838ca6d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://gist.github.com/alon710/bfdbd4d8edcf6cd0b3abcf06b55c6e3d", "content": "# CVE-2026-55784: CVE-2026-55784: Concurrent Request Context Overwrite in free5GC AUSF\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55784\n\n## Summary\nA concurrency synchronization flaw (race condition) exists in the Authentication Server Function (AUSF) of the free5GC 5G core network implementation. In versions 1.4.4 and earlier, authentication contexts are stored in a global sync.Map keyed solely by the Subscriber Permanent Identifier (SUPI). If multiple concurrent authentication requests are received for the same SUPI, the active security parameters (such as keys and expected responses) are unconditionally overwritten, resulting in authentication failures for the legitimate user.\n\n## TL;DR\nA critical concurrency vulnerability (CWE-362) in free5GC AUSF allows unauthenticated network attackers to cause a denial of service (DoS) for targeted subscribers by sending concurrent authentication requests that overwrite active cryptographic session contexts.\n\n## Technical Details\n\n- **CWE ID**: CWE-362\n- **Attack Vector**: Network\n- **Attack Complexity**: Low\n- **Privileges Required**: None\n- **Impact**: Availability (High)\n- **Exploit Status**: None / Concept Only\n\n## Affected Systems\n\n- free5GC AUSF\n- **free5GC**: <= 1.4.4 (Fixed in: `Not patched`)\n\n## Mitigation\n\n- Restrict network access to the AUSF Service-Based Interface (SBI) / N12 interface via strict network firewalls or Service Mesh access policies.\n- Implement rate limiting at the API gateway or proxy layer for /nausf-auth/v1/ue-authentications endpoint based on the SUPI request attribute.\n- Incorporate composite keying in the internal implementation of free5GC to key the active session pool by both SUPI and a unique Transaction/Session ID.\n\n**Remediation Steps:**\n1. Review the internal free5GC code structure specifically inside internal/context/context.go and internal/sbi/processor/ue_authentication.go.\n2. Apply localized patches to prevent unconditional context replacement, such as adding active validation flags or converting the lookup map key to a compound identifier.\n3. Deploy mutual TLS (mTLS) configurations on the SBI to ensure only authentic Access and Mobility Management Functions (AMFs) can initiate authentication sessions.\n\n## References\n\n- [GitHub Security Advisory GHSA-334q-h5g3-fpxv](https://github.com/free5gc/free5gc/security/advisories/GHSA-334q-h5g3-fpxv)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-55784)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55784) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-29T09:32:16.539775Z"} https://vulnerability.circl.lu/sighting/d343130b-fe31-4606-9d1e-13b838ca6d40/export Sat, 29 Aug 2026 09:32:16 +0000 https://vulnerability.circl.lu/sighting/d3d45a62-993b-4bb3-b67a-5ac46c90c4aa/export {"uuid": "d3d45a62-993b-4bb3-b67a-5ac46c90c4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55784", "type": "published-proof-of-concept", "source": "https://github.com/free5gc/free5gc/security/advisories/GHSA-334q-h5g3-fpxv", "content": "", "creation_timestamp": "2026-08-29T00:35:08.093722Z"} {"uuid": "d3d45a62-993b-4bb3-b67a-5ac46c90c4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55784", "type": "published-proof-of-concept", "source": "https://github.com/free5gc/free5gc/security/advisories/GHSA-334q-h5g3-fpxv", "content": "", "creation_timestamp": "2026-08-29T00:35:08.093722Z"} https://vulnerability.circl.lu/sighting/d3d45a62-993b-4bb3-b67a-5ac46c90c4aa/export Sat, 29 Aug 2026 00:35:08 +0000 https://vulnerability.circl.lu/sighting/b11ff554-d60f-46ff-b32c-70f83b89b0fa/export {"uuid": "b11ff554-d60f-46ff-b32c-70f83b89b0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mu6mwsa5mu2l", "content": "Another 5G Core Leak, Because Modern Infrastructure Loves Self-Destruction\nPANIC 68% | Lag 0.0h | free5GC version 1.4.4 and earlier are affected by CVE-2026-55784, a high-severity flaw rated 7.5. Gr\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-29T00:33:59.346018Z"} {"uuid": "b11ff554-d60f-46ff-b32c-70f83b89b0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mu6mwsa5mu2l", "content": "Another 5G Core Leak, Because Modern Infrastructure Loves Self-Destruction\nPANIC 68% | Lag 0.0h | free5GC version 1.4.4 and earlier are affected by CVE-2026-55784, a high-severity flaw rated 7.5. Gr\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-29T00:33:59.346018Z"} https://vulnerability.circl.lu/sighting/b11ff554-d60f-46ff-b32c-70f83b89b0fa/export Sat, 29 Aug 2026 00:33:59 +0000 https://vulnerability.circl.lu/sighting/759e314b-3755-4a72-bb3b-1bd2e020b27d/export {"uuid": "759e314b-3755-4a72-bb3b-1bd2e020b27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l3ppgae27", "content": "\ud83d\udfe0 CVE-2026-55784 - High (7.5)\n\nfree5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55784/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T00:00:57.116855Z"} {"uuid": "759e314b-3755-4a72-bb3b-1bd2e020b27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l3ppgae27", "content": "\ud83d\udfe0 CVE-2026-55784 - High (7.5)\n\nfree5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55784/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T00:00:57.116855Z"} https://vulnerability.circl.lu/sighting/759e314b-3755-4a72-bb3b-1bd2e020b27d/export Sat, 29 Aug 2026 00:00:57 +0000