CVE-2026-5661: Free5GC NGSetupRequest denial of service
Published Apr 6, 2026
·Updated
A vulnerability was identified in Free5GC 4.2.0. This affects an unknown function of the component NGSetupRequest Handler. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit is publicly available and might be used.
Affected Software
1 affected component
free5gc Free5GC NGSetupRequest Handler=4.2.0
Event History
Apr 6, 2026
CVE Published
via MITRE·02:08 PM
Data Sourced
via MITRE·02:08 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Apr 7, 58249
Event
via FIRST·11:19 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-5661?
CVE-2026-5661 is classified as a denial of service vulnerability that affects Free5GC 4.2.0.
2
How do I fix CVE-2026-5661?
To mitigate CVE-2026-5661, upgrading Free5GC to a newer version that has addressed this vulnerability is recommended.
3
How can CVE-2026-5661 be exploited?
CVE-2026-5661 can be exploited remotely by manipulating the NGSetupRequest Handler to cause a denial of service.
4
What component is affected by CVE-2026-5661?
CVE-2026-5661 affects the NGSetupRequest Handler component in Free5GC version 4.2.0.
5
Is there a public exploit available for CVE-2026-5661?
Yes, there is a public exploit available that can be used to exploit CVE-2026-5661.