{"vulnerability": "cve-2026-5578", "sightings": [{"uuid": "bb505639-e0db-4db3-a350-83a125eb4152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5578", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mirjixtnor2g", "content": "", "creation_timestamp": "2026-04-05T19:50:49.337309Z"}, {"uuid": "59a0ec83-e60b-4fff-9308-cba46a6a2ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117179907645538096", "content": "CVE-2026-55784 - Auth state overwrite flaw in free5GC 5G core network AUSF component. CVSS 7.5. Unpatched, monitor for fixes and mitigate immediately. #CVE #5G #infosec\nhttps://www.valtersit.com/cve/CVE-2026-55784/", "creation_timestamp": "2026-08-29T17:11:35.449311Z"}, {"uuid": "3e594a79-97dc-49bd-ae14-fa3a8266ca7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muaeolxf7723", "content": "CVE-2026-55784 - Auth state overwrite flaw in free5GC 5G core network AUSF component. CVSS 7.5. Unpatched, monitor for fixes and mitigate immediately. #CVE #5G #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55784/", "creation_timestamp": "2026-08-29T17:11:39.492072Z"}, {"uuid": "cddc823e-3e2f-40e5-8f90-b6c010f3b9ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55786", "type": "published-proof-of-concept", "source": "https://github.com/flytohub/flyto-core/security/advisories/GHSA-h9f9-h6gm-wc85", "content": "", "creation_timestamp": "2026-07-06T18:35:06.719418Z"}, {"uuid": "1330bacb-b38d-4909-b2a0-9144869ef04f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55787", "type": "published-proof-of-concept", "source": "https://github.com/flytohub/flyto-core/security/advisories/GHSA-794r-5rp2-fpg8", "content": "", "creation_timestamp": "2026-07-06T18:35:08.939431Z"}, {"uuid": "31862a27-e526-4296-bb64-05efb576ad3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55789", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd26i3vhl2k", "content": "\ud83d\udfe0 CVE-2026-55789 - High (8.5)\n\nLogto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55789/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T21:00:47.966174Z"}, {"uuid": "8b2884ab-2056-484a-8083-0c79a3e4a0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55781", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbgwznhp2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55781 \u0432 NanaZip: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/04ED7A65-24AA-4BAE-B0BE-9BFC756FD10D", "creation_timestamp": "2026-07-10T23:10:47.729988Z"}, {"uuid": "e76c7107-b328-43b4-9d30-89e25538de9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55782", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbhkys5q2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55782 \u0432 NanaZip: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows\n\n\n\nhttps://kripta.biz/posts/61CD3043-ADFB-4EE3-8515-88B2099A9DC2", "creation_timestamp": "2026-07-10T23:11:08.756894Z"}, {"uuid": "71afab4e-4d5c-4928-8a57-4d0b8be1f1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55780", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdbkcyc4g26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55780 \u0432 NanaZip: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/51B56F57-85FB-4CD7-9E43-CC5FF82DA0EB", "creation_timestamp": "2026-07-10T23:12:40.989815Z"}, {"uuid": "62fa1b03-6903-4a62-8d0d-a2c74e0f906f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55781", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdchmwk5w2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55781 \u0432 NanaZip: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows\n\n\n\nhttps://kripta.biz/posts/C24A0BA0-6B44-4524-AFE8-1D1BABB195FB", "creation_timestamp": "2026-07-10T23:29:04.473676Z"}, {"uuid": "6e34993c-ca7a-4c13-b8cf-344ff653faa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55780", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdd34wa7o27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55780 \u0432 NanaZip: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows\n\n\n\nhttps://kripta.biz/posts/E32690F7-A5CA-43A3-BB33-C7FA0CE90130", "creation_timestamp": "2026-07-10T23:39:59.109253Z"}, {"uuid": "bfbfe82b-9c52-4b84-a141-3a791ef5e994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55783", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdd5ebveh2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55783 \u0432 NanaZip: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows\n\n\n\nhttps://kripta.biz/posts/1945A6DB-AF44-421D-A3EE-E7AD727B6989", "creation_timestamp": "2026-07-10T23:41:13.885650Z"}, {"uuid": "9ebcea71-4bf7-4ae9-ab67-42eb6edf9f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55782", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqddc2bxvo27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55782 \u0432 NanaZip: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows\n\n\n\nhttps://kripta.biz/posts/E6C612DD-4128-4F5D-A876-8ED434E6B5E3", "creation_timestamp": "2026-07-10T23:43:51.270143Z"}, {"uuid": "def11ac8-4061-488b-b19d-3025a9d5c3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55789", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdkxyc7jz2s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55789 \u0432 Logto: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 SaaS \u0438 AI-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445\n\n\n\nhttps://kripta.biz/posts/62823F56-8B60-4A40-A839-4DDCC8AD360E", "creation_timestamp": "2026-07-11T02:01:23.410955Z"}, {"uuid": "b11ff554-d60f-46ff-b32c-70f83b89b0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mu6mwsa5mu2l", "content": "Another 5G Core Leak, Because Modern Infrastructure Loves Self-Destruction\nPANIC 68% | Lag 0.0h | free5GC version 1.4.4 and earlier are affected by CVE-2026-55784, a high-severity flaw rated 7.5. Gr\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-29T00:33:59.346018Z"}, {"uuid": "d3d45a62-993b-4bb3-b67a-5ac46c90c4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55784", "type": "published-proof-of-concept", "source": "https://github.com/free5gc/free5gc/security/advisories/GHSA-334q-h5g3-fpxv", "content": "", "creation_timestamp": "2026-08-29T00:35:08.093722Z"}, {"uuid": "f65b8f38-3c48-42ae-b326-27087ff2e2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55785", "type": "seen", "source": "https://gist.github.com/alon710/80c417396f60f7c70df3dd3bd23d2e87", "content": "# CVE-2026-55785: CVE-2026-55785: Non-Constant-Time Cryptographic Comparison and Sensitive Information Leakage in free5GC AUSF\n\n> **CVSS Score:** 3.7\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55785\n\n## Summary\nfree5GC is an open-source implementation of the 5G core network. Prior to version 1.4.5, the Authentication Server Function (AUSF) component of free5GC performs cryptographic comparisons within its Service-Based Interface (SBI) handling logic using non-constant-time helpers. These comparison utilities return immediately upon encountering a mismatching character, creating a covert timing channel. Concurrently, the AUSF writes the expected validation vector to standard output logs at the INFO level, exposing sensitive cryptographic material to unauthorized processes or logging agents.\n\n## TL;DR\nThe free5GC AUSF component prior to version 1.4.5 leaks expected authentication secrets in plaintext console logs and verifies user authentication responses using non-constant-time operations, allowing potential credential recovery.\n\n## Technical Details\n\n- **CWE Identifier**: CWE-208: Observable Timing Discrepancy\n- **Secondary CWE**: CWE-532: Insertion of Sensitive Information into Log File\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 3.7\n- **Exploit Status**: none\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- free5gc AUSF\n- **ausf**: < 1.4.5 (Fixed in: `1.4.5`)\n\n## Mitigation\n\n- Upgrade the free5GC core to version 1.4.5 or newer to implement constant-time comparison wrappers.\n- Configure standard logging aggregation engines to filter out any lines containing 'XresStar' or 'res*'.\n- Limit authorization logs in production deployments of free5gc-ausf to WARN or ERROR levels.\n\n**Remediation Steps:**\n1. Navigate to the free5GC installation repository and checkout version v1.4.5 or later.\n2. Rebuild the AUSF microservice using the Go toolchain to incorporate the crypto/subtle code changes.\n3. Update your ausfcfg.yaml configurations to restrict the logging level of Auth5gAkaLog and AuthELog.\n4. Examine centralized SIEM index systems and purge any logged authentication vectors that were written prior to upgrading.\n\n## References\n\n- [GitHub Security Advisory GHSA-fp46-6vfw-gc9c](https://github.com/free5gc/free5gc/security/advisories/GHSA-fp46-6vfw-gc9c)\n- [free5gc/ausf Patch Commit](https://github.com/free5gc/ausf/commit/7a5a4aa1ec6cd0e1febebf333911c3104968edf0)\n- [free5gc/ausf Pull Request 63](https://github.com/free5gc/ausf/pull/63)\n- [free5gc/ausf Tag Release v1.4.5](https://github.com/free5gc/ausf/releases/tag/v1.4.5)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55785) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-29T08:31:54.759992Z"}, {"uuid": "759e314b-3755-4a72-bb3b-1bd2e020b27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l3ppgae27", "content": "\ud83d\udfe0 CVE-2026-55784 - High (7.5)\n\nfree5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55784/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T00:00:57.116855Z"}, {"uuid": "d343130b-fe31-4606-9d1e-13b838ca6d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55784", "type": "seen", "source": "https://gist.github.com/alon710/bfdbd4d8edcf6cd0b3abcf06b55c6e3d", "content": "# CVE-2026-55784: CVE-2026-55784: Concurrent Request Context Overwrite in free5GC AUSF\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55784\n\n## Summary\nA concurrency synchronization flaw (race condition) exists in the Authentication Server Function (AUSF) of the free5GC 5G core network implementation. In versions 1.4.4 and earlier, authentication contexts are stored in a global sync.Map keyed solely by the Subscriber Permanent Identifier (SUPI). If multiple concurrent authentication requests are received for the same SUPI, the active security parameters (such as keys and expected responses) are unconditionally overwritten, resulting in authentication failures for the legitimate user.\n\n## TL;DR\nA critical concurrency vulnerability (CWE-362) in free5GC AUSF allows unauthenticated network attackers to cause a denial of service (DoS) for targeted subscribers by sending concurrent authentication requests that overwrite active cryptographic session contexts.\n\n## Technical Details\n\n- **CWE ID**: CWE-362\n- **Attack Vector**: Network\n- **Attack Complexity**: Low\n- **Privileges Required**: None\n- **Impact**: Availability (High)\n- **Exploit Status**: None / Concept Only\n\n## Affected Systems\n\n- free5GC AUSF\n- **free5GC**: <= 1.4.4 (Fixed in: `Not patched`)\n\n## Mitigation\n\n- Restrict network access to the AUSF Service-Based Interface (SBI) / N12 interface via strict network firewalls or Service Mesh access policies.\n- Implement rate limiting at the API gateway or proxy layer for /nausf-auth/v1/ue-authentications endpoint based on the SUPI request attribute.\n- Incorporate composite keying in the internal implementation of free5GC to key the active session pool by both SUPI and a unique Transaction/Session ID.\n\n**Remediation Steps:**\n1. Review the internal free5GC code structure specifically inside internal/context/context.go and internal/sbi/processor/ue_authentication.go.\n2. Apply localized patches to prevent unconditional context replacement, such as adding active validation flags or converting the lookup map key to a compound identifier.\n3. Deploy mutual TLS (mTLS) configurations on the SBI to ensure only authentic Access and Mobility Management Functions (AMFs) can initiate authentication sessions.\n\n## References\n\n- [GitHub Security Advisory GHSA-334q-h5g3-fpxv](https://github.com/free5gc/free5gc/security/advisories/GHSA-334q-h5g3-fpxv)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-55784)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55784) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-29T09:32:16.539775Z"}]}