Nrf vulnerabilities

2 known vulnerabilities in Nrf from Free5gc. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  nrf: Improper Access Control

  CVE-2026-33062Mar 20, 2026Free5gc

  free5GC is an open source 5G core network. free5GC NRF prior to version 1.4.2 has an Improper Input Validation vulnerability leading to Denial of Service. All deployments of free5GC using the NRF discovery service are affected. The `EncodeGroupId` function att

• 9.1 Critical severity

  Nrf: Incorrect Authorization

  CVE-2025-66719Jan 23, 2026Free5gc

  An issue was discovered in Free5gc NRF 1.4.0. In the access-token generation logic of free5GC, the AccessTokenScopeCheck() function in file internal/sbi/processor/access_token.go bypasses all scope validation when the attacker uses a crafted targetNF value. Th