CVE-2025-66786: Openairinterface Oai-CN5G-Amf

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to AMF's SBI interface to launch a denial-of-service attack.

Affected products

• Openairinterface Oai-CN5G-Amf: up to and including 2.0.1

Published 2026-01-07. Last modified 2026-06-17.