free5GC is an open-source implementation of the 5G core network.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 27, 2026 · NIST NVD

   Detected

   free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 §6.9.5.1. The AMF does not check for ongoing N2 handover procedures before initiating a NAS Security Mode Command, and vice versa. This can lead to mismatches between NAS and AS security contexts in the network and th

2. Oct 14, 2026 · NIST NVD

   Updated

   free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 §6.9.5.1. The AMF does not check for ongoing N2 handover procedures before initiating a NAS Security Mode Command, and vice versa. This can lead to mismatches between NAS and AS security contexts in the network and th

Affected

• cpe free5gc/free5gcversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-42082

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-42082

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2026-42082

  free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 §6.9.5.1. The AMF does not check for ongoing N2 handover procedures before initiating a NAS Secur

  nvd.nist.gov

References

• Exploit · github.com