CVE-2026-93307 MEDIUM

CVE-2026-93307: O-RAN-SC SMO OAM VES Collector memory allocation

Vendor O-Ran-Sc
Product SMO OAM
Weakness CWE-789
Published September 17, 2026
Last update September 23, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Key dates

02Disclosure timeline

September 17, 2026 CVE published
September 23, 2026 Record updated