CVE-2026-8782
omec-project amf NGAP Message handler.go null pointer dereference
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
14th
A weakness has been identified in omec-project amf up to 2.1.3-dev. This affects an unknown function of the file ngap/handler.go of the component NGAP Message Handler. This manipulation causes null pointer dereference. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. Upgrading to version 2.2.0 mitigates this issue. It is recommended to upgrade the affected component. The same pull request fixes multiple security issues.
| CWE | CWE-476 CWE-404 |
| Vendor | omec-project |
| Product | amf |
| Published | May 18, 2026 |
| Last Updated | May 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for omec-project amf
Be the first to know when new medium vulnerabilities affecting omec-project amf are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
omec-project / amf
2.1.3-dev
References
vuldb.com: https://vuldb.com/vuln/364406 vuldb.com: https://vuldb.com/vuln/364406/cti vuldb.com: https://vuldb.com/submit/811654 github.com: https://github.com/omec-project/amf/issues/674 github.com: https://github.com/omec-project/amf/pull/666 github.com: https://github.com/omec-project/amf/releases/tag/v2.2.0 github.com: https://github.com/omec-project/amf/
Credits
🔍 shovon0203 (VulDB User) VulDB CNA Team