Webconsole vulnerabilities

2 known vulnerabilities in Webconsole from Free5gc. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  free5gc: Improper Authorization

  CVE-2026-40246Apr 16, 2026Free5gc

  free5GC is an open-source implementation of the 5G core network. In versions 1.4.2 and below of the UDR service, the handler for deleting Traffic Influence Subscriptions checks whether the influenceId path segment equals subs-to-notify, but does not return aft

• 9.8 Critical severity

  Open5Gc: Cross-Site Request Forgery

  CVE-2023-4659Oct 2, 2023Free5gc

  Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests w