PT-2026-42880 · Unknown · Omec-Project Amf

Shovon0203 · Published 2026-05-23 · Updated 2026-07-07 · CVE-2026-9301

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions omec-project amf versions prior to 2.1.2

Description A memory corruption issue exists in the NGReset Message Handler component. A remote attacker can trigger this condition through specific manipulation of the system.

Recommendations Apply the available patch to resolve the issue in versions prior to 2.1.2.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2026-9301

GHSA-QM7Q-RCM2-3FRC

GO-2026-5844

Affected Products

Omec-Project Amf

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9301.json · Exploit
• 🔥 https://github.com/omec-project/amf/issues/678 · Exploit
• https://github.com/omec-project/amf/pull/666 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-9301 · Security Note
• https://osv.dev/vulnerability/GHSA-qm7q-rcm2-3frc · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-5844 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-9301 · Vendor Advisory
• https://github.com/omec-project/amf/commit/34bc6724acc97dba1f8691e586da95b042cb612d · Note
• https://github.com/omec-project/amf · Note
• https://vuldb.com/vuln/365248/cti · Note
• https://vuldb.com/vuln/365248 · Note
• https://github.com/advisories/GHSA-qm7q-rcm2-3frc · Note
• https://vuldb.com/submit/811842 · Note
• https://t.me/CVEtracker/54711 · Telegram Post