CVE-2026-44321

The CVE concerns free5GC SMF (v4.2.x) where the UPI route group lacked inbound OAuth middleware, allowing an unauthenticated POST to /upi/v1/upNodesLinks to trigger a validation failure that calls Fatalf, terminating the entire SMF process. Specifically, an attacker-controlled JSON payload can tr...

CVE-2026-44321

creationtimestamp| type| source ---|---|--- 2026-05-08 22:47:24+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-44qj-cghf-9p97...