CVE-2026-30070: n/a

CVE-2026-30070 describes a denial of service vulnerability in free5gc v4.0.1 within the HandleGetSharedData function. An attacker can trigger the DoS condition by providing specially crafted input. The vulnerability is classified under CWE-770 (Allocation of Resources Without Limits or Throttling). The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no impact on confidentiality or integrity, and high impact on availability. No known exploits are reported in the wild, and no patch or remediation level has been published by the vendor.

Successful exploitation results in denial of service, causing service disruption or crash of the affected free5gc component. There is no impact on data confidentiality or integrity. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting exposure of the affected service to untrusted networks and monitor for unusual input patterns targeting the HandleGetSharedData function.