free5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-44325 · Microsoft / collected KEV context

EUVD-2026-32573

GHSA-f8qv-7x5w-qr48

GO-2026-5349

cve-program · CVE-2026-44325

• https://github.com/free5gc/free5gc/security/advisories/GHSA-f8qv-7x5w-qr48
• https://github.com/free5gc/free5gc/issues/918
• https://github.com/free5gc/nrf/pull/83
• https://github.com/free5gc/nrf/commit/f7bc77daa7425506af7569f2e61c2a210f5a0423

euvd · EUVD-2026-32573

• https://github.com/free5gc/free5gc/security/advisories/GHSA-f8qv-7x5w-qr48
• https://github.com/free5gc/free5gc/issues/918
• https://github.com/free5gc/nrf/pull/83
• https://github.com/free5gc/nrf/commit/f7bc77daa7425506af7569f2e61c2a210f5a0423

nvd · CVE-2026-44325

• https://github.com/free5gc/free5gc/issues/918
• https://github.com/free5gc/free5gc/security/advisories/GHSA-f8qv-7x5w-qr48
• https://github.com/free5gc/nrf/commit/f7bc77daa7425506af7569f2e61c2a210f5a0423
• https://github.com/free5gc/nrf/pull/83

osv · GHSA-f8qv-7x5w-qr48

• https://github.com/free5gc/free5gc/security/advisories/GHSA-f8qv-7x5w-qr48
• https://nvd.nist.gov/vuln/detail/CVE-2026-44325
• https://github.com/free5gc/free5gc/issues/918
• https://github.com/free5gc/nrf/pull/83
• https://github.com/free5gc/nrf/commit/f7bc77daa7425506af7569f2e61c2a210f5a0423
• https://github.com/free5gc/free5gc

osv · GO-2026-5349

• https://github.com/free5gc/free5gc/security/advisories/GHSA-f8qv-7x5w-qr48
• https://nvd.nist.gov/vuln/detail/CVE-2026-44325
• https://github.com/free5gc/nrf/commit/f7bc77daa7425506af7569f2e61c2a210f5a0423
• https://github.com/free5gc/nrf/pull/83
• https://github.com/free5gc/free5gc/issues/918

No related operational record is retained in the current change model.