CVE-2026-40249 - Vulnerability Analysis

Overview

free5GC UDR service <= 4.2.1 contains a broken access control caused by fail-open behavior in PUT handler for Policy Data notification subscriptions, letting attackers modify subscriptions with invalid input, exploit requires crafted request.

Severity & Score

Impact

Attackers can modify existing Policy Data notification subscriptions with invalid or empty input, potentially causing unauthorized changes.

Mitigation

Update to the latest version once a patch is available.

References

• https://github.com/free5gc/free5gc/security/advisories/GHSA-gx38-8h33-pmxr

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner