CVE-2026-44317

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-policyauthorization/v1/app-sessions handler panics on a single authenticated request whose ascReqData.suppFeat == "1" enabling traffic-routing feature negotiation and whose medComponents...

CVE-2026-44317 free5GC: PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-policyauthorization/v1/app-sessions handler panics on a single authenticated request whose ascReqData.suppFeat == "1" enabling traffic-routing feature negotiation and whose medComponents...

GHSA-WWQH-7JM5-GJ7W free5GC's PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference

Summary free5GC's PCF POST /npcf-policyauthorization/v1/app-sessions handler panics on a single authenticated request whose ascReqData.suppFeat == "1" enabling traffic-routing feature negotiation and whose medComponents entries supply an afAppId but NO AfRoutReq. The create path then calls...

PT-2026-39247

Name of the Vulnerable Software and Affected Versions free5GC versions prior to 4.2.2 Description The PCF handler for the endpoint "/npcf-policyauthorization/v1/app-sessions" contains a flaw that causes a runtime panic when processing a specific authenticated request. This occurs when the...

Tenda AX2 Pro Code Execution Vulnerability

Tenda AX2 Pro is a home user designed entry-level Gigabit Wi-Fi 6 router from Tenda China. A code execution vulnerability exists in Tenda AX2 Pro version V16.03.29.48, which can be exploited by an attacker to execute arbitrary code via the Routing feature...

Tenda AX12 Denial of Service Vulnerability

Tenda AX12 is a dual-band Gigabit Wi-Fi 6 wireless router designed for home users, supporting dual-band concurrent transmission at up to 2976Mbps. The Tenda AX12 suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service with the help of Routing...

Tenda AX2 Pro 安全漏洞

Tenda AX2 Pro is a home user designed entry-level Gigabit Wi-Fi 6 router from Tenda China. A code execution vulnerability exists in Tenda AX2 Pro version V16.03.29.48, which can be exploited by an attacker to execute arbitrary code via the Routing feature...

Tenda AX12 安全漏洞

Tenda AX12 is a dual-band Gigabit Wi-Fi 6 wireless router designed for home users, supporting dual-band concurrent transmission at up to 2976Mbps. The Tenda AX12 suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service with the help of Routing...