CVE-2026-41136: FREE5GC Amf

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the `HTTPUEContextTransfer` handler in `internal/sbi/api_communication.go` does not include a `default` case in the `Content-Type` switch statement. When a request arrives with an unsupported `Content-Type`, the deserialization step is silently skipped, `err` remains `nil`, and the processor is invoked with a completely uninitialized `UeContextTransferRequest` object. Version 1.4.3 contains a fix.

Affected products

• FREE5GC Amf: before 1.4.3 (fixed in 1.4.3)
• FREE5GC FREE5GC: up to and including 4.2.1

Published 2026-04-22. Last modified 2026-06-17.