pcf vulnerabilities | LiveThreat CVE Feed

Product

pcf

by free5gc · last CVE Apr 21, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 0Low 0

Severity

Exploitation

Watch

Add pcf to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-41135	7.5	1%	Apr 21	free5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Service Affected: < 1.4.3
CVE-2026-1739	7.5	1%	Feb 2	Free5GC pcf smpolicy.go HandleCreateSmPolicyRequest null pointer dereference Affected: 1.4.0; 1.4.1
CVE-2025-66720	7.5	0%	Jan 23	Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId Affected: 1.4.0