CVE-2026-44329Patch(free5gc / free5gc)

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch free5gc free5gc systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization middleware. A network attacker who can reach SMF on the SBI can hit UPI endpoints with no Authorization header at all, and the requests reach the SMF business handlers. In the running Docker lab this was directly demonstrated for read (GET /upi/v1/upNodesLinks), write (POST /upi/v1/upNodesLinks with attacker-controlled UP-node and link payload), and delete (DELETE /upi/v1/upNodesLinks/{nodeID}) operations. This vulnerability is fixed in 4.2.2.

free5gc CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Exploit / PoC references

Weakness type (CWE)

CWE-306CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

free5gc

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

free5gc

Products

free5gc

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Full discourse1 post

CVE Brief@DailyCVEBrief137d
Patch
DEEP DIVE — CVE-2026-44329 is a CVSS 10.0 auth-bypass in free5GC's SMF: the UPI management API has no OAuth2 check, so any host on the 5G core's SBI can read, write, and delete user-plane topology unauthenticated. Patched in 4.2.2. https://t.co/Gxuem9nBXW
Post summary
This tweet announces a CVSS 10.0 authentication bypass in free5GC’s SMF and notes that the issue is fixed in version 4.2.2, without mentioning a PoC, exploit, or ongoing attacks.
10000231
18 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	free5gc	free5gc	-	-	-

Explore more

Back to dashboard free5gc CVEs free5gc vulnerabilities