Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationReleaseRequest of the file internal/pfcp/handler/handler.go of the component PFCP UDP Endpoint. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The exploit has been published and may be used. A patch should be applied to remediate this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1682 Null Pointer Dereference Exploit in Free5GC SMF PFCP UDP Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1682
Post summary
This brief entry notes a null pointer dereference vulnerability in Free5GC’s SMF PFCP UDP Endpoint with no additional details on PoC, exploitation, patch, or active use.
CVE-2026-1682 A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationReleaseRequest of the file internal/pfcp/handler/handler.go of the compo… https://www.cve.org/CVERecord?id=CVE-2026-1682
Post summary
A flaw was identified in Free5GC SMF up to version 4.1.0, specifically affecting the HandlePfcpAssociationReleaseRequest function; while technical details are provided, no exploit, PoC, patch, or active exploitation is mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | free5gc | free5gc | - | - | - |