CVE-2026-4531: Free5GC AMF handler.go HandleRegistrationComplete denial of service

Published Mar 22, 2026
·
Updated

A weakness has been identified in Free5GC 4.1.0. Affected is the function HandleRegistrationComplete of the file internal/gmm/handler.go of the component AMF. Executing a manipulation can lead to denial of service. The attack may be performed from remote. This patch is called 52e9386401ce56ea773c5aa587d4cdf7d53da799. It is best practice to apply a patch to resolve this issue.

Affected Software

1 affected component
free5gc Free5GC AMF=4.1.0

Event History

Mar 22, 2026
CVE Published
via MITRE·01:32 AM
Data Sourced
via MITRE·01:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeakness
Mar 15, 58208
Event
via FIRST·06:38 PM

Frequently Asked Questions

1

What is the severity of CVE-2026-4531?

CVE-2026-4531 has been identified as a denial of service vulnerability, indicating that it can disrupt service availability.

2

How do I fix CVE-2026-4531?

To fix CVE-2026-4531, it is recommended to update Free5GC to a version that addresses this vulnerability.

3

What components are affected by CVE-2026-4531?

CVE-2026-4531 affects the Free5GC 4.1.0 version, specifically the HandleRegistrationComplete function in the AMF component.

4

What impact does CVE-2026-4531 have on Free5GC users?

The impact of CVE-2026-4531 on Free5GC users is potential service interruption due to a denial of service condition.

5

Is there a known exploit for CVE-2026-4531?

Yes, CVE-2026-4531 has known exploitation vectors that can be used to manipulate the HandleRegistrationComplete function.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203