CVE-2026-93310
MediumCVSS 5.3Summary
A vulnerability was identified in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. Remote exploitation is possible and the exploit is publicly available.
Risk Assessment
Uncontrolled resource allocation may lead to exhaustion of memory or other system resources, potentially causing denial of service (DoS) in the O-RAN environment.
Recommendation
Monitor vendor communications and apply patches when available. Restrict access to the VES Collector component to trusted networks only.
Other vulnerabilities in O-RAN-SC SMO OAM
See all- CVE-2026-93309Medium
A vulnerability was determined in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. The attack may be launched remotely and the exploit is publicly disclosed.
- CVE-2026-93308Medium
A vulnerability was found in O-RAN-SC SMO OAM (2025-06-10) in the VES Collector component. An unknown functionality leads to allocation of resources. The attack may be initiated remotely and the exploit has been made public.
- CVE-2026-93307Medium
A vulnerability in the VES Collector component of O-RAN-SC SMO OAM allows uncontrolled memory allocation via manipulation of the additionalFields.padding argument. The attack can be launched remotely and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collector. The manipulation leads to allocation of resources. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through a bug report but has not responded yet.