CVE-2026-30067 free5gc CVE debrief

Who should care

Teams using free5gc v4.0.1 should assess and mitigate CVE-2026-30067 due to its HIGH severity and potential for Denial of Service (DoS) attacks. Affected operators and platforms must review vulnerability management and security team impact. Assign an owner for follow-up and plan vendor-supported updates or mitigations through normal change control where exposure is confirmed. Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Confirm whether affected product deployments exist in managed environments and prioritize defensive actions accordingly. Consider the HIGH CVSS score of 7.5 when prioritizing defensive actions and compensating controls for exposed systems while remediation is scheduled and verified. Check relevant monitoring, detection, and logs for exposed assets that need extra review. Consider compensating controls for exposed systems while remediation is scheduled and verified. Review compensating controls for exposed systems while remediation is scheduled and verified. Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed. Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up. Review compensating controls for exposed systems while remediation is scheduled and verified. Check relevant monitoring, detection, and logs for exposed assets that need extra review. Consider compensating controls for exposed systems while remediation is scheduled and verified. Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed. Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up. Review compensating controls for exposed systems while remediation is scheduled and verified. Check relevant monitoring, detection, and logs for exposed assets that need extra review. Consider compensating controls 7

Technical summary

CVE-2026-30067 is a HIGH severity vulnerability in free5gc v4.0.1. The complexQueryFilterSubprocess function in the NRF Discovery service can be exploited for Denial of Service (DoS) via crafted input. The CVSS score is 7.5. The vulnerability affects the NRF Discovery service of free5gc v4.0.1 and can be exploited via crafted input to cause a Denial of Service (DoS). The HIGH severity score of 7.5 indicates a significant threat to affected systems.

Defensive priority

CVE-2026-30067 has a HIGH CVSS score of 7.5. Consider prioritizing defensive actions.

Recommended defensive actions

• Verify the integrity of free5gc installations
• Restrict input to the complexQueryFilterSubprocess function
• Monitor for unusual activity in free5gc services

Evidence notes

The CVE-2026-30067 record indicates a Denial of Service (DoS) vulnerability in free5gc v4.0.1. Evidence is limited; verify with official records and assess potential impact on managed environments. Check relevant monitoring, detection, and logs for exposed assets that need extra review. Consider compensating controls for exposed systems while remediation is scheduled and verified.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.