CVE-2026-14623

MEDIUM

omec-project amf NGAP Message RRCInactiveTransitionReport denial of service

Title source: cna
STIX 2.1

Description

A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionReport of the component NGAP Message Handler. Executing a manipulation can lead to denial of service. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 34bc6724acc97dba1f8691e586da95b042cb612d. A patch should be applied to remediate this issue.

References (8)

Core 8
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-376139 | omec-project amf NGAP Message RRCInactiveTransitionReport denial of service
https://vuldb.com/vuln/376139
Signature, Permissions Required signature permissions-required
VDB-376139 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/376139/cti
Third Party Advisory third-party-advisory
CVE-2026-14623 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-14623
Third Party Advisory third-party-advisory
Submit #845348 | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption
https://vuldb.com/submit/845348
Exploit exploit issue-tracking
https://github.com/omec-project/amf/issues/676

Scores

CVSS v3 4.3
EPSS 0.0052
EPSS Percentile 40.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Details

CWE
CWE-404
Status published
Products (2)
omec-project/amf 2.1.0
omec-project/amf 2.1.1
Published Jul 04, 2026
Tracked Since Jul 04, 2026