CVE-2026-14624CWE-404

omec-project amf NGSetupRequest handler.go denial of service

Medium · published July 4, 2026

CVSS v4.0
5.3
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/src/amf/ngap/handler.go of the component NGSetupRequest Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The identifier of the patch is 34bc6724acc97dba1f8691e586da95b042cb612d. To fix this issue, it is recommended to deploy a patch.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00545 · 44.9th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2026-07-04T10:15Z
EPSS history
Timeline
  • 04 JUL 10:15Z
    omec-project amf NGSetupRequest handler.go denial of service
    cvelistv5