Skip to content
Threat Feed

Tag

CVE-2026-44330

1 brief RSS
critical advisory

free5GC NEF nnef-pfdmanagement API Unauthenticated Access Vulnerability

free5GC's NEF nnef-pfdmanagement API is vulnerable to unauthenticated access, allowing attackers with network access to read PFD data and create/delete PFD subscriptions by using forged bearer tokens due to the absence of inbound OAuth2/bearer-token authorization.

nef free5GC unauthenticated access CVE-2026-44330 PFD management network security
2r 1t 4i