Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 4 total.
Missing authentication on PFD-management API in free5GC NEF (CVE-2026-44315)
free5GC's Network Exposure Function (NEF) mounts the `3gpp-pfd-management` route group without inbound OAuth2/bearer-token authorization, accepting arbitrary or forged bearer tokens. An attacker with network access to...
Fixed in v4.2.2
Missing authentication on traffic-influence API in free5GC NEF (CVE-2026-44326)
The Network Exposure Function (NEF) in free5GC mounts the `3gpp-traffic-influence` API without inbound OAuth2/bearer-token authorization, allowing any network-reachable party to create, read, patch, and delete traffic...
Fixed in v4.2.2
Missing authentication on NEF OAM route group in free5GC (CVE-2026-44327)
free5GC's Network Exposure Function (NEF) mounts the `nnef-oam` route group without inbound OAuth2/bearer-token authorization middleware, despite advertising OAuth2 enforcement. Any network-reachable party can send un...
Fixed in v4.2.2
Missing inbound authentication on nnef-pfdmanagement API in free5GC NEF (CVE-2026-44330)
free5GC's NEF mounts the `nnef-pfdmanagement` route group without any inbound OAuth2/bearer-token authorization middleware, despite advertising `OAuth2 setting receive from NRF: true`. Any network attacker able to rea...
Fixed in v4.2.2