{"data":{"id":"6995b1f3-b613-406f-8054-af36987e6e6a","title":"CVE-2025-66786: OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote…","summary":"CVE-2025-66786 affects OpenAirInterface CN5G AMF versions up to and including v2.0.1. A logical error in how the component processes JSON-format requests lets unauthorized remote attackers send malicious JSON data to the AMF's SBI interface, causing a denial-of-service condition. The weakness is classified as CWE-20, Improper Input Validation, and NVD has not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-66786","publishedAt":"2026-01-07T22:16:01.227Z","cveId":"CVE-2025-66786","cweIds":["CWE-20"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["OpenAirInterface CN5G AMF"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenAirInterface CN5G AMF denial of service via malicious JSON requests","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00372,"epssCheckedAt":"2026-11-04T06:10:15.713Z","kevDateAdded":null,"advisoryAliases":["GHSA-62p9-m62j-p76m"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T00:12:48.511Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.6,"researchCategory":null,"atlasIds":null,"fixes":[]}}