CVE-2026-30079

In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure. This allows authentication to be bypassed completely. If a SecurityModeComplete message is sent after InitialUERegistration, a registration reject is received followed by a registration accept! This leads the UE to be registered without proper authentication.

• CWE-288

• https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf/-/issues/77Exploit, Issue Tracking, Third Party Advisory

Published

Apr 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3005The List category posts plugin for WordPress is vulnerable t…6.4
• CVE-2026-3006Successful exploitation of the race condition vulnerability …7
• CVE-2026-3007Successful exploitation of the stored cross-site scripting (…5.4
• CVE-2026-30075OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnera…7.5
• CVE-2026-30077OpenAirInterface V2.2.0 AMF crashes when it fails to decode …7.5
• CVE-2026-30078OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP…7.5
• CVE-2026-3008Successful exploitation of the string injection vulnerabilit…6.6
• CVE-2026-30080OpenAirInterface v2.2.0 accepts Security Mode Complete witho…7.5
• CVE-2026-30082Multiple stored cross-site scripting (XSS) vulnerabilities i…6.1
• CVE-2026-3009A security flaw in the IdentityBrokerService.performLogin en…8.1
• CVE-2026-3010Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2026-3011The Recipe Card Blocks Lite plugin for WordPress is vulnerab…6.4