CVE-2026-93308
MediumCVSS 4.3Summary
A vulnerability was found in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. The attack may be initiated remotely and the exploit has been made public.
Risk Assessment
Uncontrolled resource allocation may lead to exhaustion of system resources, potentially causing denial of service (DoS) in the O-RAN environment.
Recommendation
Monitor vendor communications and apply patches when available. Restrict access to the VES Collector component to trusted networks only.
Other vulnerabilities in O-RAN-SC SMO OAM
See all- CVE-2026-93310Medium
A vulnerability was identified in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. Remote exploitation is possible and the exploit is publicly available.
- CVE-2026-93309Medium
A vulnerability was determined in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. The attack may be launched remotely and the exploit is publicly disclosed.
- CVE-2026-93307Medium
A vulnerability in the VES Collector component of O-RAN-SC SMO OAM allows uncontrolled memory allocation via manipulation of the additionalFields.padding argument. The attack can be launched remotely and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of the component VES Collector. Performing a manipulation results in allocation of resources. The attack may be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through a bug report but has not responded yet.