Go/github.com/free5gc/amf CVE-2026-42082: medium 5.4, EPSS 0.25%

Free5GC AMF has Missing Concurrent NAS SMC Validation During NGAP Handover in github.com/free5gc/amf

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5673
• nvd: CVE-2026-42082
• https://github.com/free5gc/free5gc/security/advisories/GHSA-vrrx-58h3-prmh
• https://github.com/free5gc/amf/blame/v1.4.3/internal/gmm/sm.go
• https://github.com/free5gc/amf/blame/v1.4.3/internal/ngap/handler.go

CVE-2026-42082 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:26.471517290Z · JSON