CVE-2026-55784

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by internal/sbi/processor/ue_authentication.go creates an AusfUeContext, and AddAusfUeContextToPool executes ausfContext.UePool.Store(ausfUeContext.Supi, ausfUeContext), unconditionally replacing the active context for that SUPI. An attacker with access to the AUSF SBI/N12 interface can send concurrent POST /nausf-auth/v1/ue-authentications requests for the same target SUPI, causing all attempts to share one logical authentication context URL while K_aut, XRES, and EapID are repeatedly overwritten. A valid EAP-AKA' response for an earlier challenge is then checked against the latest context, causing AT_MAC verification to fail and denying authentication to the selected subscriber while the request flood continues. No fixed version is available as of this review.

• CWE-362

• https://github.com/free5gc/free5gc/security/advisories/GHSA-334q-h5g3-fpxv
• https://github.com/free5gc/free5gc/security/advisories/GHSA-334q-h5g3-fpxv

Published

Aug 28, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55779Silverstripe Versioned provides versioning for Silverstripe …5.4
• CVE-2026-5578A vulnerability was found in CodeAstro Online Classroom 1.0.…6.3
• CVE-2026-55780NanaZip is the 7-Zip derivative intended for the modern Wind…2.4
• CVE-2026-55781NanaZip is the 7-Zip derivative intended for the modern Wind…2.4
• CVE-2026-55782NanaZip is the 7-Zip derivative intended for the modern Wind…2.4
• CVE-2026-55783NanaZip is the 7-Zip derivative intended for the modern Wind…2.4
• CVE-2026-55785free5GC is an open-source implementation of the 5G core netw…3.7
• CVE-2026-55789Logto is the modern, open-source auth infrastructure for Saa…8.5
• CVE-2026-5579A vulnerability was determined in CodeAstro Online Classroom…6.3
• CVE-2026-55790Craft CMS is a content management system (CMS). In versions …7.4
• CVE-2026-55791Craft CMS is a content management system (CMS). Versions 4.0…6.9
• CVE-2026-55792Craft CMS is a content management system (CMS). In versions …6