PT-2026-30603 · Unknown · Openairinterface

Tasnim · Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-30078

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenAirInterface version 2.2.0

Description OpenAirInterface V2.2.0 AMF is susceptible to a crash when processing NGAP messages containing invalid procedure codes or PDU-types. This occurs, for example, when a message expects an 'InitiatingMessage' but receives a 'successfulOutcome' instead.

Recommendations Update to a newer version of OpenAirInterface that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-30078

Affected Products

Openairinterface

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-30078 · Security Note
• https://twitter.com/VulmonFeeds/status/2041169027142127720 · Twitter Post
• https://twitter.com/CVEnew/status/2041171328078614664 · Twitter Post
• https://twitter.com/infoflowcloud/status/2041173252752429260 · Twitter Post
• https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/merge_requests/414 · Note
• https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/74 · Note