NIST · via Voidly Atlas
CVE-2026-8781
This is the agency's own public-domain data, curated and made citable by Voidly. Voidly adds no independent claim — always verify against the linked canonical source.
cve id
CVE-2026-8781
published
2026-05-18T02:16:37.570
last modified
2026-05-18T02:16:37.570
status
Received
description
A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.2.0 is sufficient to resolve this issue. Upgrading the affected component is recommended. The same pull request fixes multiple security issues.
cvss score
4.3
cvss severity
MEDIUM
cvss vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
cwes
CWE-404|CWE-476
cpe count
0
Cite this record
CVE-2026-8781 — MEDIUM. NIST, via Voidly Atlas — Surveillance & Digital-Rights Watch. Retrieved 2026-06-07, https://voidly.ai/atlas/federal/nvd-cves/CVE-2026-8781
@misc{voidly_nvd_cves_CVE20268781,
title = {CVE-2026-8781 — MEDIUM},
author = {{Voidly}},
howpublished = {\url{https://voidly.ai/atlas/federal/nvd-cves/CVE-2026-8781}},
note = {Source: NIST National Vulnerability Database, https://nvd.nist.gov/vuln/detail/CVE-2026-8781. Public domain (17 U.S.C. §105); re-surfaced under CC BY 4.0},
urldate = {2026-06-07},
year = {2026}
}Also available as JSON/BibTeX/APA: API record. Source data is U.S. federal public domain (17 U.S.C. §105). Re-surfaced by Voidly under CC BY 4.0.