CVE-2026-93310
O-RAN-SC SMO OAM VES Collector allocation of resources
- State
- Published
- Severity
- 6.9 Medium
- Published
- Sep 18, 2026
- Updated
- Sep 18, 2026
- Reserved
- Sep 17, 2026
Description
A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collector. The manipulation leads to allocation of resources. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through a bug report but has not responded yet.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
SMO OAMO-RAN-SC |
|
References
- VDB-406596 | O-RAN-SC SMO OAM VES Collector allocation of resourcesvdb-entry
- VDB-406596 | CTI Indicators (IOB, IOC, TTP)signaturepermissions-required
- CVE-2026-93310 | CVE Analysis and Reportthird-party-advisory
- Submit #942313 | O-RAN-SC SMO L-Release CWE-770 Allocation of Resources Without Limits or Throttlingthird-party-advisory
- https://lf-o-ran-sc.atlassian.net/browse/SMO-204related
- https://gist.github.com/fklement/f70321f38513c2e82a87f062e519c587exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.