Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-93307— O-RAN-SC SMO OAM VES Collector memory allocation

Quick assessment

Affected

O-RAN-SC SMO OAM

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 O-RAN-SC SMO OAM 2025-06-10 中发现了一个漏洞。受影响的是 VES Collector 组件中的一个未知功能。对参数的操纵会导致不可控的内存分配。该漏洞可被远程利用。该利用方式已公开，可能已被使用。项目方早在收到问题报告时已被通知，但尚未回应。

CVSS 4.3 · Medium EPSS 0.53% · P44 Updated Sep 24, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

Vendor	Product	Version Range	Status
O-RAN-SC	SMO OAM	`2025-06-10`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

O-RAN-SC SMO OAM VES Collector memory allocation

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

未经控制的内存分配

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
O-RAN-SC	SMO OAM	2025-06-10	`cpe:2.3:a:o-ran-sc:smo_oam::::::::`

II. Public POCs for CVE-2026-93307

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-93307

请登录查看更多情报信息。

Proof of Concept for CVE-2026-93307 (1)

🔗 CWE-789 - DoS in VES Collector: Resource Exhaustion via Large Payloads · GitHub Read full article exploit

Vendor Pages for CVE-2026-93307 (1)

🔗 VulDB | Security Check vdb-entry technical-description

Other References for CVE-2026-93307 (1)

🔗 Something went wrong. related

https://www.cve.org/CVERecord?id=CVE-2026-93307

Same Patch Batch · O-RAN-SC · 2026-09-17 · 3 CVEs total

CVE-2026-93308	4.3 MEDIUM	O-RAN-SC SMO OAM VES Collector allocation of resources
CVE-2026-93309	4.3 MEDIUM	O-RAN-SC SMO OAM VES Collector allocation of resources

IV. Related Vulnerabilities

Same product: SMO OAM

Same vendor: O-RAN-SC

Same weakness: CWE-789