CVE-2026-1975

A security flaw has been discovered in Free5GC up to 4.1.0. This impacts the function identityTriggerType of the file pfcp_reports.go. The manipulation results in null pointer dereference. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Applying a patch is advised to resolve this issue.

• CWE-404
• CWE-476
• CWE-476

• https://github.com/free5gc/free5gc/Product
• https://github.com/free5gc/free5gc/issues/814Exploit, Issue Tracking, Vendor Advisory
• https://github.com/free5gc/free5gc/issues/814#issue-3831993593Exploit, Issue Tracking, Vendor Advisory
• https://github.com/free5gc/smf/pull/189Issue Tracking
• https://vuldb.com/?ctiid.344497Permissions Required, VDB Entry
• https://vuldb.com/?id.344497Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.743238Exploit, Third Party Advisory, VDB Entry

Published

Feb 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19744Cross-site Scripting in the Markdown renderer in maalfer Pen…5.1
• CVE-2026-19745A flaw has been found in Calix GigaSpire 26.1.0. Impacted is…4.3
• CVE-2026-19746A vulnerability has been found in Calix GigaSpire 26.1.0. Th…4.3
• CVE-2026-19747A weakness has been identified in Tenda CH7, CH7G, CH10, CP3…9.8
• CVE-2026-19748A security vulnerability has been detected in Tenda CH7, CH7…3.7
• CVE-2026-19749A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, …3.7
• CVE-2026-19750A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V2…8.2
• CVE-2026-19751A flaw has been found in EnzoVezzaro mcp-dominican-layer up …6.3
• CVE-2026-19752A vulnerability was found in EnzoVezzaro mcp-dominican-layer…6.3
• CVE-2026-19753A vulnerability was detected in Model Context Protocol mcp-r…7.3
• CVE-2026-19754Baserow versions 2.2.0 through 2.3.3 contain an SQL injectio…8.6
• CVE-2026-19755NoSleep 1.5.1 exposes a privileged XPC Mach service and acce…6.9