Medium severity4.3NVD Advisory· Published Sep 17, 2026

CVE-2026-93307

Description

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

O-RAN/SMO OAMllm-create
Range: = 2025-06-10

Patches

Vulnerability mechanics

References

gist.github.com/fklement/1c1ff92588944a021ceb2b5e894973c5nvd
lf-o-ran-sc.atlassian.net/browse/SMO-201nvd
vuldb.com/cve/CVE-2026-93307nvd
vuldb.com/submit/942297nvd
vuldb.com/submit/942306nvd
vuldb.com/vuln/406593nvd
vuldb.com/vuln/406593/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000