CVE-2026-9301

A vulnerability was found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGReset Message Handler. Performing a manipulation results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and could be used. It is recommended to apply a patch to fix this issue.

• CWE-119

• https://github.com/omec-project/amf/
• https://github.com/omec-project/amf/issues/678
• https://github.com/omec-project/amf/pull/666
• https://vuldb.com/submit/811842
• https://vuldb.com/vuln/365248
• https://vuldb.com/vuln/365248/cti

Published

May 23, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92987roxmltree through 0.21.1 performs quadratic-time attribute a…7.5
• CVE-2026-9299A flaw has been found in omec-project amf up to 2.1.1. Affec…6.3
• CVE-2026-92991The Biggop Library is vulnerable to Cross-Site Scripting via…5.4
• CVE-2026-92992A security vulnerability has been detected in Dromara mayfly…6.3
• CVE-2026-92993A vulnerability was detected in Dromara mayfly-go up to 1.11…6.3
• CVE-2026-9300A vulnerability has been found in omec-project amf up to 2.1…6.3
• CVE-2026-93012Email::Sender::Transport::Sendmail versions before 2.602 for…9.8
• CVE-2026-93013RAGFlow through 0.27.2 contains a path traversal vulnerabili…4.3
• CVE-2026-93014RosarioSIS versions before 12.9 fail to validate the filenam…7.1
• CVE-2026-93015BlueKitchen BTstack through 1.8.2 fails to validate the peer…6.3
• CVE-2026-93018Imager versions before 1.036 for Perl disclose uninitialised…5.5
• CVE-2026-93019Imager versions before 1.036 for Perl exit the process readi…9.1