Is CVE-2026-8779 actively exploited?

No active exploitation of CVE-2026-8779 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-8779 be exploited remotely?

Yes. CVE-2026-8779 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-8779?

CVE-2026-8779 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-8779

MEDIUM

CVE-2026-8779

CWE-119Published: May 18, 2026· Updated: May 18, 2026

4.3

CVSS v3.1

EPSS:0.05%probability of exploitation in 30 daysPercentile:14.4th

Official Description

A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement can lead to memory corruption. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.2.0 is recommended to address this issue. The affected component should be upgraded. The same pull request fixes multiple security issues.

NVD Source

Technical Analysis

CVE-2026-8779 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

From a weakness classification perspective (CWE-119): Buffer overflow vulnerabilities can lead to arbitrary code execution or denial of service by corrupting adjacent memory.