FR
Product
free5gc
72
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 43Medium 21Low 2
Watch
Add free5gc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44327 | 10.0 | May 27 | free5GC: NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler Affected: < 4.2.2 |
| CVE-2026-44329 | 10.0 | May 27 | free5GC: SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers Affected: < 4.2.2 |
| CVE-2026-44330 | 10.0 | May 27 | free5GC: NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions Affected: < 4.2.2 |
| CVE-2026-44315 | 9.4 | May 27 | free5GC: NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions Affected: < 4.2.2 |
| CVE-2026-44326 | 9.4 | May 27 | free5GC: NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions Affected: < 4.2.2 |
| CVE-2026-55068 | 9.3 | Aug 28 | free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints Affected: < 4.2.3 |
Showing 6