Go/github.com/free5gc/amf CVE-2026-41136: medium 5.3, EPSS 0.33%
free5GC AMF: Missing default case in Content-Type switch in HTTPUEContextTransfer
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r99v-75p9-xqm5
- https://github.com/free5gc/free5gc/security/advisories/GHSA-r99v-75p9-xqm5
- https://nvd.nist.gov/vuln/detail/CVE-2026-41136
- https://github.com/free5gc/amf/releases/tag/v1.4.3
- https://github.com/free5gc/free5gc
CVE-2026-41136 · published · modified · JSON