MEDIUM

CVE-2026-93310

2026-09-18 CVSS v3.1

CVSS

5.3

Description

A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collector. The manipulation leads to allocation of resources. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through a bug report but has not responded yet.

Weakness (CWE)

CWE-400 Uncontrolled Resource Consumption

CWE-770 Resource Allocation Without Limits

EPSS Score

0.41%

Probability of exploitation in next 30 days

34.5th percentile

References

https://gist.github.com/fklement/f70321f38513c2e82a87f062e519c587 https://lf-o-ran-sc.atlassian.net/browse/SMO-204 https://vuldb.com/cve/CVE-2026-93310 https://vuldb.com/submit/942313 https://vuldb.com/vuln/406596 https://vuldb.com/vuln/406596/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE