CVE-2026-55068

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/{nfInstanceID} accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or nfServices.ipEndPoints address constraints. The invalid profiles are persisted in the MongoDB NfProfile collection and returned by NFDiscover, allowing an attacker with SBI access to advertise attacker-controlled network-function endpoints and redirect control-plane signaling. This can expose credentials and signaling, alter service discovery integrity, and deny service across network functions that trust the NRF. This issue is fixed in version 4.2.3.

• CWE-20

• https://github.com/free5gc/free5gc/issues/1056
• https://github.com/free5gc/free5gc/releases/tag/v4.2.3
• https://github.com/free5gc/free5gc/security/advisories/GHSA-x8mj-6p3q-g5pp
• https://github.com/free5gc/nrf/commit/bda0cf75be5556bb4c758c8b34710f3fe6bbe3ea
• https://github.com/free5gc/nrf/commit/fcd3cfaa27cc4dc17172ee0c4c3e0a3a696297c6
• https://github.com/free5gc/nrf/pull/90
• https://github.com/free5gc/nrf/releases/tag/v1.4.5
• https://github.com/free5gc/free5gc/security/advisories/GHSA-x8mj-6p3q-g5pp

Published

Aug 28, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55061uniget is a universal installer and updater for (container) …1
• CVE-2026-55062uniget is a universal installer and updater for (container) …8.4
• CVE-2026-55064Vikunja is an open-source self-hosted task management platfo…4.3
• CVE-2026-55065Vikunja is an open-source self-hosted task management platfo…8.1
• CVE-2026-55066Vikunja is an open-source self-hosted task management platfo…7.1
• CVE-2026-55067Vikunja is an open-source self-hosted task management platfo…5
• CVE-2026-55069Kestra is an open-source, event-driven orchestration platfor…8.7
• CVE-2026-5507When restoring a session from cache, a pointer from the seri…4
• CVE-2026-55071MCP-for-Stata is a MCP server for integrating Stata into age…8.4
• CVE-2026-55072Pimcore is an Open Source Data & Experience Management Platf…8.5
• CVE-2026-55073WeasyPrint helps web developers to create PDF documents. Pri…6.2
• CVE-2026-55074Ansible FreeBSD Jail Connection Plugin is an Ansible connect…8.2