CVE-2026-40249

MEDIUM SEVERITY

Vulnerability Description

free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors

Published Date

April 14, 2026

Last Modified

April 14, 2026

Source

GitHub

Vendor

Product

github.com/free5gc/udr