Detections
Analytics
SCA: security update for github.com/free5gc/udr (GHSA-jqfc-gwj5-3w63)
medium Tenable Cloud Security Plugin ID 441574
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr
DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subscriptions handler
panics on a single authenticated request against a fresh UDR instance when the supplied ueId does not
exist in UESubsCollection. The processor checks value, ok := udrSelf.UESubsCollection.Load(ueId) and sets
a 404 USER_NOT_FOUND problem-details on the miss path, but execution continues and immediately runs
value.(*udr_context.UESubsData) -- a Go type assertion on a nil interface, which panics with interface
conversion: interface {} is nil, not *context.UESubsData. Gin recovery converts the panic into HTTP 500,
but the endpoint remains repeatedly panicable. This vulnerability is fixed in 4.2.2. (CVE-2026-44324)
Solution
Update the github.com/free5gc/udr library and its related packages to version 1.4.3 or later.See Also
Plugin Details
Severity: Medium
ID: 441574
Version: Revision 1.5
Type: Local
Family: SCA Checks
Published: 5/9/2026
Updated: 6/1/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.72
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C
CVSS Score Source: CVE-2026-44324
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.9
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/8/2026
Vulnerability Publication Date: 5/8/2026
Reference Information
CVE: CVE-2026-44324