Skip to content
OpenAdvisories

Package · Go

github.com/free5gc/smf

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-44329

    free5GC: SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization middleware. A network attacker who can reach SMF on the SBI can hit UPI endpoints wi…

    free5gc free5gc github.com/free5gc/smf Go