CVE-2026-8783

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8783", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-05-17T09:56:04.123Z", "datePublished": "2026-05-18T02:15:11.485Z", "dateUpdated": "2026-05-18T19:27:39.001Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-05-18T02:15:11.485Z"}, "title": "omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-476", "lang": "en", "description": "NULL Pointer Dereference"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-404", "lang": "en", "description": "Denial of Service"}]}], "affected": [{"vendor": "omec-project", "product": "amf", "versions": [{"version": "2.1.3-dev", "status": "affected"}, {"version": "2.2.0", "status": "unaffected"}], "cpes": ["cpe:2.3:a:omec-project:amf:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispatcher.go. Such manipulation leads to null pointer dereference. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 will fix this issue. Upgrading the affected component is advised. The same pull request fixes multiple security issues."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-05-17T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-05-17T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-05-17T12:01:19.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "shovon0203 (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/364407", "name": "VDB-364407 | omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/364407/cti", "name": "VDB-364407 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/811655", "name": "Submit #811655 | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption", "tags": ["third-party-advisory"]}, {"url": "https://github.com/omec-project/amf/issues/675", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/omec-project/amf/pull/666", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/omec-project/amf/releases/tag/v2.2.0", "tags": ["patch"]}, {"url": "https://github.com/omec-project/amf/", "tags": ["product"]}]}, "adp": [{"references": [{"url": "https://vuldb.com/submit/811655", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-18T19:27:12.464881Z", "id": "CVE-2026-8783", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T19:27:39.001Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-8783", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-18T19:27:12.464881Z"}}}], "references": [{"url": "https://vuldb.com/submit/811655", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-18T19:26:23.630Z"}}], "cna": {"title": "omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference", "credits": [{"lang": "en", "type": "reporter", "value": "shovon0203 (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:omec-project:amf:*:*:*:*:*:*:*:*"], "vendor": "omec-project", "product": "amf", "versions": [{"status": "affected", "version": "2.1.3-dev"}, {"status": "unaffected", "version": "2.2.0"}]}], "timeline": [{"lang": "en", "time": "2026-05-17T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-05-17T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-05-17T12:01:19.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/364407", "name": "VDB-364407 | omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/364407/cti", "name": "VDB-364407 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/811655", "name": "Submit #811655 | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption", "tags": ["third-party-advisory"]}, {"url": "https://github.com/omec-project/amf/issues/675", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/omec-project/amf/pull/666", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/omec-project/amf/releases/tag/v2.2.0", "tags": ["patch"]}, {"url": "https://github.com/omec-project/amf/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispatcher.go. Such manipulation leads to null pointer dereference. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 will fix this issue. Upgrading the affected component is advised. The same pull request fixes multiple security issues."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "NULL Pointer Dereference"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "Denial of Service"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-05-18T02:15:11.485Z"}}}, "cveMetadata": {"cveId": "CVE-2026-8783", "state": "PUBLISHED", "dateUpdated": "2026-05-18T19:27:39.001Z", "dateReserved": "2026-05-17T09:56:04.123Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-05-18T02:15:11.485Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:omec-project:amf:*:*:*:*:*:*:*:*"], "product": "amf", "vendor": "omec-project", "versions": [{"status": "affected", "version": "2.1.3-dev"}, {"status": "unaffected", "version": "2.2.0"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispatcher.go. Such manipulation leads to null pointer dereference. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.2.0 will fix this issue. Upgrading the affected component is advised. The same pull request fixes multiple security issues."}, {"lang": "es", "value": "Se ha detectado una vulnerabilidad de seguridad en omec-project amf hasta la versi\u00f3n 2.1.3-dev. Esto afecta a la funci\u00f3n UERadioCapabilityCheckResponse del archivo ngap/dispatcher.go. Dicha manipulaci\u00f3n conduce a una desreferencia de puntero nulo. El ataque puede ejecutarse de forma remota. El exploit ha sido divulgado p\u00fablicamente y puede ser utilizado. La actualizaci\u00f3n a la versi\u00f3n 2.2.0 solucionar\u00e1 este problema. Se aconseja actualizar el componente afectado. La misma solicitud de extracci\u00f3n corrige m\u00faltiples problemas de seguridad."}], "id": "CVE-2026-8783", "lastModified": "2026-10-26T13:10:00.140", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8783", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-18T19:27:12.464881Z", "version": "2.0.3"}}]}, "published": "2026-05-18T04:16:33.723", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/omec-project/amf/"}, {"source": "cna@vuldb.com", "url": "https://github.com/omec-project/amf/issues/675"}, {"source": "cna@vuldb.com", "url": "https://github.com/omec-project/amf/pull/666"}, {"source": "cna@vuldb.com", "url": "https://github.com/omec-project/amf/releases/tag/v2.2.0"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/811655"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/364407"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/364407/cti"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://vuldb.com/submit/811655"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-404"}, {"lang": "en", "value": "CWE-476"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.1.3-dev"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "2.2.0"}}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "amf", "source": "cna", "vendor": "omec-project"}, "product": "amf", "vendor": "omec-project"}], "created": "2026-05-18T04:30:16.983702+00:00", "updated": "2026-05-18T05:00:13.099710+00:00", "vendors": ["omec-project", "omec-project$PRODUCT$amf"]}