HOMEVULNERABILITIESCVE-2026-30080
HIGH

CVE-2026-30080

Published: April 8, 2026· Updated: Apr 14, 2026

7.5
CVSS v3.1
EPSS:0.02%probability of exploitation in 30 daysPercentile:4.9th

Official Description

OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has supported integrity NIA1 and NIA2. But if an UE sends initial registration request with only security capability IA0, OpenAirInterface accepts and proceeds. This downgrade security context can lead to the possibility of replay attack.

NVD Source

Technical Analysis

CVE-2026-30080 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 7.5.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges Req.None
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Vendors & Products

openairinterface1 product
oai-cn5g-amf
Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

All References (2)

https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/78Exploit · Issue Tracking · Third Party Advisory
https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/78Exploit · Issue Tracking · Third Party Advisory

Quick Facts

CVE IDCVE-2026-30080
CVSS Score7.5 / 10
SeverityHIGH
CISA KEVNo
EPSS (30d)0.02%
Affected1 vendor
PublishedApr 8, 2026

Recommended Actions

  • Apply vendor patches immediately
  • Monitor CVE-2026-30080 in threat intel feeds
  • Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.