CVE-2026-44324 free5GC: UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)

🗓️ 27 May 2026 15:44:27Reported by GoogleType

osv🔗 osv.dev👁 2 Views

CVE-2026-44324: free5GC UDR DELETE amf-subscriptions panics on missing UE state due to nil interface; fixed in 4.2.2.

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2026-44324	27 May 202615:44	–	attackerkb
Circl	CVE-2026-44324	8 May 202622:52	–	circl
CNNVD	free5GC 代码问题漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-44324	27 May 202615:44	–	cve
Cvelist	CVE-2026-44324 free5GC: UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)	27 May 202615:44	–	cvelist
EUVD	EUVD-2026-32574	27 May 202615:44	–	euvd
Github Security Blog	free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)	8 May 202622:52	–	github
NVD	CVE-2026-44324	27 May 202617:16	–	nvd
OSV	GHSA-JQFC-GWJ5-3W63 free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)	8 May 202622:52	–	osv
OSV	GO-2026-5478 free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request) in github.com/free5gc/udr	25 Jun 202622:34	–	osv

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44324.json
github	www.github.com/free5gc/free5gc/security/advisories/GHSA-jqfc-gwj5-3w63
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44324
github	www.github.com/free5gc/free5gc/issues/920
github	www.github.com/free5gc/udr/commit/8a1d3c63be99d378806d771f086ff32f1867da99
github	www.github.com/free5gc/udr/pull/60

08 Jul 2026 08:13Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.5

EPSS0.0042