OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has supported integrity NIA1 and NIA2. But if an UE sends initial registration request with only security capability IA0, OpenAirInterface accepts and proceeds. This downgrade security context can lead to the possibility of replay attack.
References
| Link | Resource |
|---|---|
| https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/78 | Exploit Issue Tracking Third Party Advisory |
| https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/78 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
14 Apr 2026, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/78 - Exploit, Issue Tracking, Third Party Advisory | |
| First Time |
Openairinterface oai-cn5g-amf
Openairinterface |
|
| CPE | cpe:2.3:a:openairinterface:oai-cn5g-amf:2.2.0:*:*:*:*:*:*:* |
09 Apr 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/78 - | |
| CWE | CWE-294 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
08 Apr 2026, 17:21
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-08 17:21
Updated : 2026-04-14 15:47
NVD link : CVE-2026-30080
Mitre link : CVE-2026-30080
CVE.ORG link : CVE-2026-30080
JSON object : View
Products Affected
openairinterface
- oai-cn5g-amf
CWE
CWE-294
Authentication Bypass by Capture-replay