CVE-2026-14623
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
A vulnerability was found in omec-project amf up to version 2.1.1 in the RRCInactiveTransitionReport function of the NGAP Message Handler. Remote manipulation can lead to denial of service (DoS). The exploit has been publicly disclosed and may be used.
Risk Assessment
The organization is at risk of remote DoS attacks, potentially disrupting network services based on this component, leading to downtime and loss of availability.
Recommendation
Apply the patch identified as 34bc6724acc97dba1f8691e586da95b042cb612d immediately to remediate the vulnerability. Upgrading to the latest version is recommended.
Other vulnerabilities in omec-project amf
See all- CVE-2026-14624Medium
A vulnerability was found in omec-project amf up to version 2.0.2/2.1.1 in the NGSetupRequest handler function within handler.go. Manipulation of this function allows a remote denial of service (DoS) attack.
- CVE-2026-9301Medium
In the omec-project amf up to version 2.1.1, a vulnerability was found in the NGReset Message Handler component that leads to memory corruption. The attack can be carried out remotely and the exploit has been published.
- CVE-2026-9300Medium
In the omec-project amf up to version 2.1.1, a vulnerability was found in the NGSetupRequest Handler component that leads to memory corruption. The attack can be carried out remotely and the exploit has been disclosed.
- CVE-2026-9299Medium
In the omec-project amf up to version 2.1.1, a vulnerability was found in the PDUSessionResourceModifyIndication function of the file /go/src/amf/ngap/handler.go that leads to memory corruption. The attack can be carried out remotely and the exploit has been published.
- CVE-2026-9298Medium
A vulnerability was found in the PathSwitchRequest Handler component of omec-project amf up to version 2.1.1, leading to memory corruption. The attack can be launched remotely and the exploit is publicly available.
Original NVD description (English source)
A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionReport of the component NGAP Message Handler. Executing a manipulation can lead to denial of service. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 34bc6724acc97dba1f8691e586da95b042cb612d. A patch should be applied to remediate this issue.