Free5GC SMF

• CVE-2026-26025 Medium 6.6 free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE  0.4%
• CVE-2026-26024 Medium 6.6 free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.USAR=1 and UsageReport omits mandatory URRID sub-IE  0.4%
• CVE-2026-25501 Medium 6.6 free5GC SMF crash (nil pointer dereference) on PFCP SessionReportRequest when ReportType.DLDR is set but DownlinkDataReport IE is missing 0.4%
• CVE-2025-69232 Low 2.7 free5GC hasProtocol Compliance Violation in UPF Leading to SMF Service Disruption 0.4%
• CVE-2026-1684 Medium 5.3 Free5GC SMF PFCP UDP Endpoint pfcp_reports.go HandleReports denial of service 0.6%
• CVE-2026-1683 Medium 5.3 Free5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of service 0.7%
• CVE-2026-1682 Medium 5.3 Free5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereference 0.7%