CVE-2026-30079

9.8 criticalEPSS 0.5%

Critical (9.8) in openairinterface oai-cn5g-amf. EPSS 0.5% chance of exploitation in the next 30 days.

In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure. This allows authentication to be bypassed completely. If a SecurityModeComplete message is sent after InitialUERegistration, a registration reject is received followed by a registration accept! This leads the UE to be registered without proper authentication.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-288
Published: 2026-04-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

openairinterface:oai-cn5g-amf

References

https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/77

Check your stack JSON