Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. A memory leak vulnerability in versions prior to 1.4.3 allows any unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory growth by sending repeated HTTP requests to the OAM endpoint. The root cause is a `router.Use()` call inside an HTTP handler that registers a new CORS middleware on every incoming request, permanently growing the Gin router's handler chain. This leads to progressive memory exhaustion and eventual Denial of Service of the PCF, preventing all UEs from obtaining AM and SM policies and blocking 5G session establishment. Version 1.4.3 contains a patch.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-22 | 1 | Disclosure1 |
| 2026-04-25 | 1 | General1 |
| 2026-05-07 | 1 | Disclosure1 |
🟠 Kiota HTTP Libraries, Automatic Redirect Header Leak, #CVE-2026-41135 (Medium) https://dailycve.com/kiota-http-libraries-automatic-redirect-header-leak-cve-2026-41135-medium/
Post summary
The post announces CVE-2026-41135 affecting Kiota HTTP Libraries, detailing an Automatic Redirect Header Leak classified as Medium severity, without providing PoC, exploit, or patch information.
CVE-2026-41135 free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. A memory leak vulnerability in v… https://www.cve.org/CVERecord?id=CVE-2026-41135
Post summary
The message identifies a memory leak vulnerability (CVE‑2026‑41135) in the free5GC PCF and directs readers to its CVE record, but offers no further exploitation, patch, or mitigation details.
CVE-2026-41135 Memory Leak Denial of Service in free5GC UDR Versions Pri... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41135 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces a newly disclosed CVE‑2026‑41135, a memory‑leak denial‑of‑service issue in free5GC UDR, linking to a vulnerability details page, but provides no PoC, exploit, patch, or active exploitation information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | free5gc | free5gc | - | - | - |
| App | free5gc | pcf | - | - | - |