VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 7, 2026· Updated Jun 17, 2026

CVE-2026-30079

CVE-2026-30079

Description

In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure. This allows authentication to be bypassed completely. If a SecurityModeComplete message is sent after InitialUERegistration, a registration reject is received followed by a registration accept! This leads the UE to be registered without proper authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Openairinterface/Oai Cn5g Amf2 versions
    cpe:2.3:a:openairinterface:oai-cn5g-amf:2.2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:openairinterface:oai-cn5g-amf:2.2.0:*:*:*:*:*:*:*
    • (no CPE)range: = V2.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.