CVE Watch26 de out. de 2026

CVE-2026-40343

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versio

CVSS

5.8

Média

EPSS

8.6%

p95

KEV

—

Exploit Today

0-100

Publicado: 22 de abr. de 2026 · Última mod.: 26 de out. de 2026 · CWE-754

EPSS · 30d

0.3%EPSS · 30 dias8.6%

2026-10-142026-11-11

Descrição técnica

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.2, a fail-open request handling flaw in the UDR service causes the `/nudr-dr/v2/policy-data/subs-to-notify` POST handler to continue processing requests even after request body retrieval or deserialization errors. This may allow unintended creation of Policy Data notification subscriptions with invalid, empty, or partially processed input, depending on downstream processor behavior. As of time of publication, a patched version is not available.

Referências oficiais

github.comhttps://github.com/free5gc/free5gc/security/advisories/GHSA-jwch-w7wh-gqjm

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-126903—

—

——0Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)1d CVE-2026-40670—

4.2%

——1Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) could allow a privileged attacker to potentially overlap MMIO regions with DRAM regions resulting in loss of integrity.6h CVE-2026-1208076.6 MÉD

13.6%

——4A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member certificate to gain elevated internal privileges when a specific deployment configuration is in use. An internal check, which prevents a certificate recognized as a cluster member from also being treated as a regular user, does not correctly distinguish between certain error conditions encountered during user lookup. Under certain timing conditions, this can cause the check to be bypassed, granting the connection full internal system privileges. Triggering this issue requires possession of a valid cluster-member TLS certificate, non-default X.509 cluster authentication configuration, and specific conditions during the user cache lookup process.2d CVE-2026-1235887.5 ALT

28.2%

——8The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2) caches an empty connection pool when it follows a referral with no glue records and all queries for the name servers' IP addresses fail. An attacker able to spoof DNS responses can make these lookups fail, causing all subsequent queries for the affected zone to fail until the cache entry expires or is evicted.9h CVE-2026-690668.4 ALT

1.9%

——1Memory corruption in GPU driver due to improper validation of VMID reservation.2d CVE-2026-690069.1 CRÍ

18.2%

——5Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.2d