CVE-2025-66786: Input Validation
Published Jan 7, 2026
·Updated
OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to AMF's SBI interface to launch a denial-of-service attack.
Affected Software
2 affected components
openairinterface CN5G AMF<=2.0.1
openairinterface Oai-cn5g-amf<=2.0.1
Event History
Jan 7, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-66786?
CVE-2025-66786 is rated as critical due to its potential for denial-of-service attacks.
2
How do I fix CVE-2025-66786?
To mitigate CVE-2025-66786, upgrade OpenAirInterface CN5G AMF to version 2.0.2 or later.
3
What impact does CVE-2025-66786 have on my system?
CVE-2025-66786 can allow unauthorized attackers to disrupt services by sending malicious JSON data.
4
Which versions of OpenAirInterface CN5G AMF are affected by CVE-2025-66786?
OpenAirInterface CN5G AMF versions up to and including 2.0.1 are affected by CVE-2025-66786.
5
Is CVE-2025-66786 exploitable remotely?
Yes, CVE-2025-66786 can be exploited remotely by attackers sending specially crafted JSON requests.