Go/github.com/free5gc/amf CVE-2026-41136: medium 5.3, EPSS 0.28%

free5GC AMF: Missing default case in Content-Type switch in HTTPUEContextTransfer in github.com/free5gc/amf

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5613
• nvd: CVE-2026-41136
• https://github.com/free5gc/free5gc/security/advisories/GHSA-r99v-75p9-xqm5
• https://github.com/free5gc/amf/releases/tag/v1.4.3

CVE-2026-41136 · published 2026-06-25T22:34:34Z · modified 2026-06-25T23:01:35.590803069Z · JSON