CVE-2026-30078Disclosure(openairinterface / oai-cn5g-amf)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specification requires InitiatingMessage but sent with successfulOutcome.

openairinterface CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/74

Other references

https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/merge_requests/414

Weakness type (CWE)

CWE-20

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

oai-cn5g-amf

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 4 classified signals
Peaked 1d ago at 3 mentions (2026-04-06); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

openairinterface

Products

oai-cn5g-amf

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 2d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-06	3	Disclosure3
2026-04-07	1	Disclosure1

Full discourse4 posts

Firmis Labs@FirmisLabs186d
Disclosure
CVE-2026-30078 · NIST 7.5/10 https://nvd.nist.gov/vuln/detail/CVE-2026-30078
Post summary
The entry simply announces CVE-2026-30078 with its NIST score and a link to the NVD entry, providing only basic disclosure information.
1000022
1 followersView on X
CVE@CVEnew187d
Disclosure
CVE-2026-30078 OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specification requi… https://www.cve.org/CVERecord?id=CVE-2026-30078
Post summary
CVE-2026-30078 details a crash in OpenAirInterface V2.2.0 AMF due to malformed NGAP messages, with no exploitation, PoC, or patch disclosed.
00010380
57.0K followersView on X
Infoflowcloud@infoflowcloud187d
Disclosure
🚨*CVE* CVE-2026-30078 OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specification requi… https://www.cve.org/CVERecord?id=CVE-2026-30078 ----- Traducción: CVE-2026-30078 Ope… http://infoflow.cloud`
Post summary
The text announces CVE‑2026‑30078, noting that the OpenAirInterface AMF crashes on receipt of invalid NGAP messages. It provides a reference but no PoC, exploit, or patch details.
0000092
67 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds187d
Disclosure
CVE-2026-30078 Denial of Service in OpenAirInterface V2.2.0 AMF via Invalid NGAP Message https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30078
Post summary
The text announces a DoS vulnerability (CVE-2026-30078) in OpenAirInterface V2.2.0 AMF caused by malformed NGAP messages, providing basic technical details but no evidence of exploitation, patches, or PoC.
00000109
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	openairinterface	oai-cn5g-amf	2.2.0	-	-

Explore more

Back to dashboard openairinterface CVEs oai-cn5g-amf vulnerabilities

What researchers are saying

CVE-2026-30078

Firmis Labs[verified]@FirmisLabsDisclosure

The entry simply announces CVE-2026-30078 with its NIST score and a link to the NVD entry, providing only basic disclosure information.

CVE@CVEnewDisclosure

CVE-2026-30078 details a crash in OpenAirInterface V2.2.0 AMF due to malformed NGAP messages, with no exploitation, PoC, or patch disclosed.

Infoflowcloud@infoflowcloudDisclosure

The text announces CVE‑2026‑30078, noting that the OpenAirInterface AMF crashes on receipt of invalid NGAP messages. It provides a reference but no PoC, exploit, or patch details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces a DoS vulnerability (CVE-2026-30078) in OpenAirInterface V2.2.0 AMF caused by malformed NGAP messages, providing basic technical details but no evidence of exploitation, patches, or PoC.