CVE-2026-14623

Medium

Description

A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionReport of the component NGAP Message Handler. Executing a manipulation can lead to denial of service. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 34bc6724acc97dba1f8691e586da95b042cb612d. A patch should be applied to remediate this issue.

SeverityMedium

CVSS4.3

Exploit probability—

ProductOmec-project Amf

PublishedJul 4, 2026

First seenJul 4, 2026

Weakness typeCWE-404CWE-404

How to fix

Patches

github.com/omec-project/amf/pull/666
github.com/omec-project/amf/commit/34bc6724acc97dba1f8691e586da95b042cb612d

Affected products

Product	Affected versions	Fixed in
omec-project amf	2.1.0, 2.1.1	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.