CVE-2026-14624

MEDIUM 4.3

omec-project amf NGSetupRequest handler.go denial of service

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/src/amf/ngap/handler.go of the component NGSetupRequest Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The identifier of the patch is 34bc6724acc97dba1f8691e586da95b042cb612d. To fix this issue, it is recommended to deploy a patch.

CWE	CWE-404
Vendor	omec-project
Product	amf
Published	Jul 4, 2026

Stay Ahead of the Next One

Get instant alerts for omec-project amf

Be the first to know when new medium vulnerabilities affecting omec-project amf are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

omec-project / amf

2.0.0 2.0.1 2.0.2 2.1.0 2.1.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/376140 vuldb.com: https://vuldb.com/vuln/376140/cti vuldb.com: https://vuldb.com/cve/CVE-2026-14624 vuldb.com: https://vuldb.com/submit/845349 github.com: https://github.com/omec-project/amf/issues/677 github.com: https://github.com/omec-project/amf/pull/666 github.com: https://github.com/omec-project/amf/commit/34bc6724acc97dba1f8691e586da95b042cb612d github.com: https://github.com/omec-project/amf/

Credits

🔍 shovon0203 (VulDB User)