CRITICAL10.0Go
GHSA-3258-qmv8-frp3· CVE-2026-44329, GO-2026-4995free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers
Modified: 6/8/2026
package
Go/github.com/free5gc/smf
pkg:go/github.com/free5gc/smf
HIGH7.5Go
GHSA-44qj-cghf-9p97· CVE-2026-44321, GO-2026-5109free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf)
Modified: 6/25/2026
HIGH8.2Go
GHSA-p9mg-74mg-cwwr· CVE-2026-44328, GO-2026-5537free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating
Modified: 6/25/2026
—Go
GO-2026-4995· CVE-2026-44329, GHSA-3258-qmv8-frp3free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers in github.com/free5gc/smf
Modified: 5/20/2026
—Go
GO-2026-5109· CVE-2026-44321, GHSA-44qj-cghf-9p97free5GC's SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) in github.com/free5gc/smf
Modified: 6/25/2026
—Go
GO-2026-5537· CVE-2026-44328, GHSA-p9mg-74mg-cwwrfree5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating in github.com/free5gc/smf
Modified: 6/25/2026