rootpwn

medium · CVSS v3 4.3 · CVSS v4 5.3

CVE-2026-93307

CVE-2026-93307 affects the VES Collector component of O-RAN-SC SMO OAM 2025-06-10. A remotely reachable input-handling issue involving addit

Overview

CVE-2026-93307 affects the VES Collector component of O-RAN-SC SMO OAM 2025-06-10. A remotely reachable input-handling issue involving additionalFields.padding can lead to uncontrolled memory allocation. It matters because O-RAN SMO/OAM systems may be exposed to network traffic and could be affected if unpatched.

Description

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Impact

Confidentiality and availability are the primary concerns, with possible memory exhaustion or service disruption in the VES Collector. Integrity impact is lower unless the allocation issue is chained with other flaws. Operators, integrators, and tenants relying on O-RAN SMO/OAM services may experience degraded performance or denial of service if the vulnerable component is exposed to untrusted input.

Affected products

  • O-RAN-SC SMO OAM 2025-06-10
  • O-RAN-SC SMO OAM
  • VES Collector

Scores

Severity
medium
CVSS v2
4
CVSS v3
4.3
CVSS v4
5.3
EPSS
—

← All CVEs

Related CVEs

medium

CVE-2026-93312

A null pointer dereference in Poppler 26.07.0’s JBIG2Stream::rewind can be triggered remotely, causing a crash in PDF rendering. The flaw is limited to the Poppler library and does not directly expose data. Updating to 26.08.0 mitigates the issue.

View analysis

medium

CVE-2026-18441

The LatePoint Appointment Booking plugin for WordPress (v5.6.9 and earlier) contains an insecure direct object reference that allows unauthenticated users to enumerate customer records when guest checkout is enabled. Attackers can retrieve first name, last name, email, and phone number for any customer ID. This flaw exposes personally identifiable information without requiring authentication.

View analysis

medium

CVE-2026-2585

Brizy – Page Builder for WordPress has a stored cross-site scripting flaw in the rootAttributes parameter through version 2.8.14. Authenticated users with Contributor-level access or higher can inject scripts that run when visitors view affected pages. This matters because it can compromise site visitors and weaken trust in the WordPress site.

View analysis

medium

CVE-2026-93308

CVE-2026-93308 affects the VES Collector component of O-RAN-SC SMO OAM 2025-06-10. A remote attacker can manipulate an unknown functionality to trigger resource allocation, potentially exhausting system resources. The vulnerability is publicly known but no patch has been released yet.

View analysis