PT-2026-1863 · Openairinterface · Openairinterface Cn5G Amf

Published 2026-01-07 · Updated 2026-01-07 · CVE-2025-66786

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenAirInterface CN5G AMF versions through 2.0.1

Description A logical error exists in the processing of JSON format requests. Remote attackers can send malicious JSON data to the AMF's SBI interface, potentially causing a denial-of-service condition. The SBI interface is the target for exploitation. The vulnerable data is sent via JSON format requests.

Recommendations Versions prior to 2.0.1 are affected.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-66786

Affected Products

Openairinterface Cn5G Amf

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-66786 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66786 · Vendor Advisory
• https://twitter.com/CVEnew/status/2008945929320038823 · Twitter Post
• https://github.com/swallele/Vulnerability/blob/main/Openairinterface/Dos/Json_Dos.md · Note