Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw
- ID
- 9687
- Status
- summarized
- Published
- 31 Jul 2026, 7:55 PM
- Fetched
- 31 Jul 2026, 11:59 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/07/researchers-report-84-flaws-in-4g-and.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 7.0
- Created
- 01 Aug 2026, 12:03 AM
- Tags
- Audience
- developersai_ml_learnersai_agent_users
What happened
Researchers from Singapore's Nanyang Technological University disclosed 84 security vulnerabilities across 4G and 5G core network implementations (Open5GS, OpenAirInterface, free5GC, SD-Core, eUPF) in signaling protocols GTP-C and PFCP. The root cause is a shared pattern of implicit trust between core network functions, made worse by cloud-native deployments exposing previously internal interfaces. They used an LLM-assisted multi-agent system called iFinder to categorize known flaws and discover new ones.
Why it matters
If you build, operate, or audit telecom infrastructure using any of these open-source LTE/5G cores—several of which back commercial deployments, not just research testbeds—check whether your GTP-C and PFCP interfaces are reachable externally and whether message format, semantics, and resource availability are validated. Malaysian telcos and infrastructure providers moving to cloud-native 5G cores face the same expanded attack surface.
Discussion angle
The iFinder multi-agent system is a concrete example of LLM agents doing real security research—summarizing known flaws, extracting detection patterns, and discovering new vulnerabilities. Discuss whether this approach could be applied to other protocol implementations Malaysian builders work with.