Findings

CVE-2026-41136

free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.

Published Apr 22, 2026 · updated Jun 17, 2026 · free5gc amf

free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the handler in does not include a case in the switch statement. When a request arrives with an unsupported , the deserialization step is silently skipped, remains , and the processor is invoked with a completely uninitialized object. Version 1.4.3 contains a fix.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 22, 2026 · NIST NVD

    Detected

    free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the handler in does not include a case in the switch statement. When a request arrives with an unsupported , the deserialization step is silently skipped, remains , and the processor is invoked with a completely uninitialized

  2. Jun 17, 2026 · NIST NVD

    Updated

    free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the handler in does not include a case in the switch statement. When a request arrives with an unsupported , the deserialization step is silently skipped, remains , and the processor is invoked with a completely uninitialized

Affected

  • cpe free5gc/amfversion unspecified
  • cpe free5gc/free5gcversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-41136

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-41136

    free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the handler in does not include a ca

    nvd.nist.gov

References