CVE-2026-30073 free5gc CVE debrief

Who should care

Organizations using free5gc v4.0.1 should be aware of this vulnerability and take necessary actions to mitigate it. This includes verifying their inventory, monitoring for crafted POST requests to NssaiAvailabilitySubscriptionCreate, and applying vendor remediation if available. Security teams and vulnerability management teams should prioritize this vulnerability due to its HIGH severity and potential impact on service availability. Additionally, operators and platform administrators should review their configurations and ensure that they are not exposed to this vulnerability. It is also recommended to review compensating controls for exposed systems while remediation is scheduled and verified. This vulnerability may impact the availability of services, and therefore, it is crucial for organizations to take immediate action to mitigate it. The NVD entry and a GitHub issue provide limited details about this vulnerability, emphasizing the need for organizations to take proactive measures to protect their systems. The CVE record indicates that the vulnerability has not been modified since its publication on 2026-08-27T17:17:52.443Z. Therefore, it is essential for organizations to stay informed and take necessary actions to prevent potential attacks. The HIGH severity of this vulnerability and its potential impact on service availability make it a critical issue that requires immediate attention from organizations using free5gc v4.0.1. By taking proactive measures, organizations can prevent potential attacks and minimize the risk associated with this vulnerability. It is also recommended to check relevant monitoring, detection, and logs for exposed assets that need extra review. This will help organizations to identify potential security issues and take necessary actions to prevent attacks. Overall, organizations using free5gc v4.0.1 should take immediate action to mitigate this vulnerability and prevent potential attacks. This includes verifying inventory, applying vendor remediation, and reviewing compensating controls to minimize the risk associated with this vulnerability. The vulnerability's HIGH severity and potential impact on service availability make it a

Technical summary

A Denial of Service (DoS) vulnerability exists in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1. The vulnerability can be exploited via a crafted POST request. This issue allows attackers to cause a Denial of Service (DoS). The CVSS score for this vulnerability is 7.5, indicating a HIGH severity level. Organizations should verify their inventory and apply vendor remediation if available.

Defensive priority

Organizations using free5gc v4.0.1 should verify their inventory and apply vendor remediation if available.

Recommended defensive actions

• Verify inventory of free5gc v4.0.1 installations
• Monitor for crafted POST requests to NssaiAvailabilitySubscriptionCreate
• Apply vendor remediation if available

Evidence notes

The CVE record indicates a Denial of Service (DoS) vulnerability in free5gc v4.0.1. Limited details are available from the NVD entry and a GitHub issue.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.