PT-2026-31326 · Unknown · Openairinterface

Tasnim Alam · Published 2026-04-08 · Updated 2026-04-13 · CVE-2026-30080

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenAirInterface version 2.2.0

Description OpenAirInterface version 2.2.0 allows Security Mode Complete without integrity protection. Despite supporting integrity protection configurations (NIA1 and NIA2), the system accepts initial registration requests with only security capability IA0. This security downgrade can enable replay attacks.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2026-30080

Affected Products

Openairinterface

References · 5

• 🔥 https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/78 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30080 · Security Note
• https://twitter.com/CVEnew/status/2043733107770306733 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2041952467064095118 · Twitter Post
• https://twitter.com/infoflowcloud/status/2043733894441148814 · Twitter Post