Vulnerabilities

TI-2026-28017 CVE-2026-37232 · GHSA-vp5m-x22p-8w47

An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN…

MEDIUM 43

An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00393 Published 2026-06-01 No fix listed CWE-369

TI-2026-23446 CVE-2026-30080 · GHSA-ppqh-5vmg-4xr4

OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection.

HIGH 72

OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00262 Published 2026-04-08 No fix listed CWE-294

TI-2026-23442 CVE-2026-30075 · GHSA-wqfp-mq8w-2gx9

OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing…

HIGH 72

OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2026-04-08 No fix listed CWE-120

TI-2026-23445 CVE-2026-30079 · GHSA-j69j-3gv3-pwvg

In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state…

MEDIUM 50

In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00546 Published 2026-04-07 No fix listed CWE-288

TI-2026-23444 CVE-2026-30078 · GHSA-3cfx-9xg9-hh68

OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid…

HIGH 72

OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00303 Published 2026-04-06 No fix listed CWE-20

TI-2026-23443 CVE-2026-30077 · GHSA-p4x4-rw25-ghm6

OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message.

HIGH 72

OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00277 Published 2026-03-30 No fix listed CWE-20

TI-2025-41054 CVE-2025-66786 · GHSA-62p9-m62j-p76m

OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format…

HIGH 72

OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00372 Published 2026-01-07 No fix listed CWE-20

TI-2025-40453 CVE-2025-65805 · GHSA-rqwq-xmxw-556r

OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS…

HIGH 72

OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00378 Published 2026-01-07 No fix listed CWE-121

TI-2025-19278 CVE-2025-26265 · GHSA-mvjr-2pvh-8wqh

A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of…

LOW 29

A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service (DoS) via a crafted UE Context Modification response.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00476 Published 2025-03-27 No fix listed CWE-119

Vulnerabilities

Filters