CVE-2026-93309
MediumCVSS 4.3Summary
A vulnerability was determined in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. The attack may be launched remotely and the exploit is publicly disclosed.
Risk Assessment
Uncontrolled resource allocation may lead to exhaustion of system resources, potentially causing denial of service (DoS) in the O-RAN environment.
Recommendation
Monitor vendor communications and apply patches when available. Restrict access to the VES Collector component to trusted networks only.
Other vulnerabilities in O-RAN-SC SMO OAM
See all- CVE-2026-93310Medium
A vulnerability was identified in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. Remote exploitation is possible and the exploit is publicly available.
- CVE-2026-93308Medium
A vulnerability was found in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. The attack may be initiated remotely and the exploit has been made public.
- CVE-2026-93307Medium
A vulnerability in the VES Collector component of O-RAN-SC SMO OAM allows uncontrolled memory allocation via manipulation of the additionalFields.padding argument. The attack can be launched remotely and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of the component VES Collector. Executing a manipulation can lead to allocation of resources. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through a bug report but has not responded yet.