CVE-2026-30057 is a Denial of Service vulnerability affecting free5gc version 4.1.0, an open-source 5G core network implementation. The vulnerability resides in the CreateUEContext handler component, which can be exploited by attackers sending crafted requests to crash or disrupt the service. Successful exploitation could render the 5G core network unavailable, impacting all connected users and services. The issue was reported via the free5gc GitHub issue tracker. No authentication bypass or code execution is indicated, but availability impact is significant in telecom environments. Administrators running free5gc v4.1.0 should monitor for patches or mitigations from the project maintainers.
