{"id":"CVE-2026-75439","title":"An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component","summary":"An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"published":"2026-09-04","updated":"2026-09-14","sourceUpdated":"2026-09-14T14:17:09.723","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-75439","references":[{"url":"https://gist.github.com/hackeryounow/0f434c03008462e6eec3b43ed3cd12d8","label":"cve@mitre.org"},{"url":"https://github.com/free5gc/free5gc/issues/1059","label":"cve@mitre.org"},{"url":"https://github.com/free5gc/free5gc/issues/1059.https://github.com/free5gc/go-upf/pull/97","label":"cve@mitre.org"},{"url":"https://github.com/free5gc/go-upf/pull/97","label":"cve@mitre.org"},{"url":"https://github.com/hackeryounow/5GCVulDB/tree/main/CVE-2026-75439","label":"cve@mitre.org"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-14T13:10:31.465834Z"},"epss":0.00422,"epssPercentile":0.36043,"ingestedAt":"2026-09-08T20:10:03.168Z","slug":"CVE-2026-75439","body":"## Overview\n\nAn issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201912,"id":"CVE-2026-75439","ts":1789399983723,"field":"exploit_available","old":"false","new":"true"},{"seq":201911,"id":"CVE-2026-75439","ts":1789399983723,"field":"cvss","old":null,"new":"7.5"},{"seq":201910,"id":"CVE-2026-75439","ts":1789399983723,"field":"severity","old":"none","new":"high"},{"seq":200642,"id":"CVE-2026-75439","ts":1789397553966,"field":"exploit_available","old":"true","new":"false"},{"seq":200641,"id":"CVE-2026-75439","ts":1789397553966,"field":"cvss","old":"7.5","new":null},{"seq":200640,"id":"CVE-2026-75439","ts":1789397553966,"field":"severity","old":"high","new":"none"},{"seq":200119,"id":"CVE-2026-75439","ts":1789395647096,"field":"exploit_available","old":"false","new":"true"},{"seq":200118,"id":"CVE-2026-75439","ts":1789395647096,"field":"cvss","old":null,"new":"7.5"},{"seq":200117,"id":"CVE-2026-75439","ts":1789395647096,"field":"severity","old":"none","new":"high"}]}