CVE-2025-66786

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Jan 7, 2026

CISA due date

—

The record

OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to AMF's SBI interface to launch a denial-of-service attack.

Affected packages

Ecosystem	Package	Introduced	Fixed