CVE-2025-66786

OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to AMF's SBI interface to launch a denial-of-service attack.
Configurations

Configuration 1 (hide)

cpe:2.3:a:openairinterface:oai-cn5g-amf:*:*:*:*:*:*:*:*

History

29 Jan 2026, 01:06

Type Values Removed Values Added
First Time Openairinterface oai-cn5g-amf
Openairinterface
CPE cpe:2.3:a:openairinterface:oai-cn5g-amf:*:*:*:*:*:*:*:*
References () https://github.com/swallele/Vulnerability/blob/main/Openairinterface/Dos/Json_Dos.md - () https://github.com/swallele/Vulnerability/blob/main/Openairinterface/Dos/Json_Dos.md - Broken Link

07 Jan 2026, 17:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-01-07 17:16

Updated : 2026-01-29 01:06


NVD link : CVE-2025-66786

Mitre link : CVE-2025-66786

CVE.ORG link : CVE-2025-66786


JSON object : View

Products Affected

openairinterface

  • oai-cn5g-amf
CWE
CWE-20

Improper Input Validation