CVE-2026-93307
MediumCVSS 4.3Summary
A vulnerability in the VES Collector component of O-RAN-SC SMO OAM allows uncontrolled memory allocation via manipulation of the additionalFields.padding argument. The attack can be launched remotely and the exploit has been publicly disclosed.
Risk Assessment
A remote attack could lead to memory exhaustion, potentially causing service disruption or denial of service.
Recommendation
Restrict access to the VES Collector component and monitor for vulnerability advisories; the vendor has not yet responded.
Other vulnerabilities in O-RAN-SC SMO OAM
See all- CVE-2026-93310Medium
A vulnerability was identified in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. Remote exploitation is possible and the exploit is publicly available.
- CVE-2026-93309Medium
A vulnerability was determined in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. The attack may be launched remotely and the exploit is publicly disclosed.
- CVE-2026-93308Medium
A vulnerability was found in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. The attack may be initiated remotely and the exploit has been made public.
Original NVD description (English source)
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a bug report but has not responded yet.