4 CVEs affecting Osmocom products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: LIBSMPP34, Osmo-Bsc, Osmo-Ggsn, Osmo-Iuh.