https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-41136.htmlhttps://patchthecve.com/cve/CVE-2026-41136.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 5.3: free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the `HTTPUEContextTransfer` handler in `internal/sbi/api_communication.go` does not include a `default` case in the `Content-Thttps://patchthecve.com/cve/CVE-2026-41135.htmlhttps://patchthecve.com/cve/CVE-2026-41135.htmlMon, 26 Oct 2026 22:10:00 +0000HIGH 7.5: free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. A memory leak vulnerability in versions prior to 1.4.3 allows any unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory ghttps://patchthecve.com/cve/CVE-2026-40343.htmlhttps://patchthecve.com/cve/CVE-2026-40343.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 5.8: free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.2, a fail-open request handling flaw in the UDR service causes the `/nudr-dr/v2/policy-data/subs-to-notify` POST handler to continue