CVE-2026-93307

MEDIUM 4.3

O-RAN-SC SMO OAM VES Collector memory allocation

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CWE	CWE-789 CWE-400
Vendor	o-ran-sc
Product	smo oam
Published	Sep 17, 2026

Stay Ahead of the Next One

Get instant alerts for o-ran-sc smo oam

Be the first to know when new medium vulnerabilities affecting o-ran-sc smo oam are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

O-RAN-SC / SMO OAM

2025-06-10

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/406593 vuldb.com: https://vuldb.com/vuln/406593/cti vuldb.com: https://vuldb.com/cve/CVE-2026-93307 vuldb.com: https://vuldb.com/submit/942297 vuldb.com: https://vuldb.com/submit/942306 lf-o-ran-sc.atlassian.net: https://lf-o-ran-sc.atlassian.net/browse/SMO-201 gist.github.com: https://gist.github.com/fklement/1c1ff92588944a021ceb2b5e894973c5

Credits

🔍 fklement (VulDB User) VulDB CNA Team