CVE-2026-30063: n/a

This vulnerability exists in the NF Discovery endpoint of free5gc v4.0.1. An attacker can exploit this flaw by crafting a specific snssais query that triggers a Denial of Service condition, disrupting the availability of the service. The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (CWE-770). There is no known exploit in the wild and no vendor remediation or patch information has been provided yet.

The primary impact is a Denial of Service condition on the NF Discovery endpoint of free5gc v4.0.1, which can disrupt service availability. There is no impact on confidentiality or integrity according to the CVSS vector. This could affect network functions relying on this endpoint, potentially causing service interruptions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing network-level protections such as rate limiting or filtering crafted snssais queries to mitigate potential DoS attempts.