CVE-2026-8781
omec-project amf handler.go RANConfiguration null pointer dereference
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.2.0 is sufficient to resolve this issue. Upgrading the affected component is recommended. The same pull request fixes multiple security issues.
| CWE | CWE-476 CWE-404 |
| Vendor | omec-project |
| Product | amf |
| Published | May 18, 2026 |
| Last Updated | May 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for omec-project amf
Be the first to know when new medium vulnerabilities affecting omec-project amf are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
omec-project / amf
2.1.3-dev
References
vuldb.com: https://vuldb.com/vuln/364405 vuldb.com: https://vuldb.com/vuln/364405/cti vuldb.com: https://vuldb.com/submit/811653 github.com: https://github.com/omec-project/amf/issues/673 github.com: https://github.com/omec-project/amf/pull/666 github.com: https://github.com/omec-project/amf/releases/tag/v2.2.0 github.com: https://github.com/omec-project/amf/
Credits
🔍 shovon0203 (VulDB User) VulDB CNA Team