PatchTheCVECVE-2026-44320: free5GC is an open-source implementation of the 5G core network
CVE-2026-44320 is a high-severity flaw (CVSS 7.3) affecting free5gc. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-callback route group without inbound OAuth2/bearer-token authorization. A forged or arbitrary bearer token (e.g. Authorization: Bearer not-a-real-token) is enough to reach the SMF-callback handler -- the callback body is parsed and dispatched into NEF business logic instead of being rejected at the auth boundary. Same root cause as the o
Why this priority
- High severity
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Last updated 2026-10-14 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-44320?
free5gc: upgrade to 4.2.2. Exact commands for each OS are on this page.
Is CVE-2026-44320 being exploited?
CVE-2026-44320 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-44320 affect?
CVE-2026-44320 affects free5gc. Severity is high (CVSS 7.3). free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-callback route group without inbound OAuth2/bearer-token authorization. A forged or arbitrary bearer token (e.g. Authorization: B
How urgent is CVE-2026-44320?
Priority 39/100. High severity; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2026-40343 MEDIUM 5.8 UPGRADE UPGRADE free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) m
- CVE-2026-41135 HIGH 7.5 UPGRADE UPGRADE free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G
- CVE-2026-41136 MEDIUM 5.3 UPGRADE UPGRADE free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5t
- CVE-2026-44329 CRITICAL 10.0 UPGRADE free5GC is an open-source implementation of the 5G core network
- CVE-2026-44327 CRITICAL 10.0 UPGRADE free5GC is an open-source implementation of the 5G core network