CVE-2026-9301

A vulnerability was found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGReset Message Handler. Performing a manipulation results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and could be used. It is recommended to apply a patch to fix this issue.

• CWE-119

• https://github.com/omec-project/amf/
• https://github.com/omec-project/amf/issues/678
• https://github.com/omec-project/amf/pull/666
• https://vuldb.com/submit/811842
• https://vuldb.com/vuln/365248
• https://vuldb.com/vuln/365248/cti

Published

May 23, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93003The Web add-on's HTTP server searches the entire request pac…6.9
• CVE-2026-93005IBM Process Mining 2.0.0 through 2.2.1 could allow an authen…6.5
• CVE-2026-93006A flaw was found in dnsmasq. The TFTP server can serve the w…6.8
• CVE-2026-93007A flaw was found in dnsmasq. The TCP DNS service uses a smal…5.3
• CVE-2026-93008A flaw was found in dnsmasq. When following a CNAME in a DNS…6.8
• CVE-2026-93009A flaw was found in dnsmasq. The DHCPv6 client hostname pars…4.3
• CVE-2026-93010A flaw was found in dnsmasq. When DHCP leasequery is enabled…4.3
• CVE-2026-93011A flaw was found in dnsmasq. After a reduction of internal d…5.3
• CVE-2026-93012Email::Sender::Transport::Sendmail versions before 2.602 for…9.8
• CVE-2026-93013RAGFlow through 0.27.2 contains a path traversal vulnerabili…4.3
• CVE-2026-93014RosarioSIS versions before 12.9 fail to validate the filenam…7.1
• CVE-2026-93015BlueKitchen BTstack through 1.8.2 fails to validate the peer…6.3