Log in Start free

Vulnerability · Published Sep 17, 2026 · Assigned by VulDB

CVE-2026-93307O-RAN-SC SMO OAM VES Collector memory allocation

Medium 4.3

In plain English

A medium-severity uncontrolled resource consumption in SMO OAM from O-RAN-SC. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.5%top 54.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Affected products (as reported)

VendorProductVersions
O-RAN-SC SMO OAM 2025-06-10

Weakness: CWE-789, CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

References