PT-2026-31326 · Unknown · Openairinterface

Tasnim Alam · CVE-2026-30080 · Published 2026-04-08 · Updated 2026-07-25

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenAirInterface version 2.2.0

Description OpenAirInterface accepts Security Mode Complete without integrity protection. Although the configuration supports integrity NIA1 and NIA2, the system accepts and proceeds if a User Equipment (UE) sends an initial registration request with only security capability IA0. This security context downgrade can enable replay attacks, where a valid data transmission is maliciously or fraudulently repeated or delayed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2026-30080

Affected Products

Openairinterface

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30080.json · Exploit
• 🔥 https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/78 · Exploit
• https://osv.dev/vulnerability/CVE-2026-30080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-30080 · Security Note
• https://t.me/cveNotify/222953 · Telegram Post
• https://twitter.com/CVEnew/status/2043733107770306733 · Twitter Post
• https://twitter.com/infoflowcloud/status/2043733894441148814 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2041952467064095118 · Twitter Post