CVE-2026-30080: OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has supported int

OpenAirInterface v2.2.0 has a security flaw where it accepts a Security Mode Complete message without integrity protection (IA0, a setting that provides no message integrity checking) even though it supports stronger options like NIA1 and NIA2 (integrity protection methods). This allows attackers to perform replay attacks (sending the same captured message multiple times to trick the system), because the weakest security setting is allowed.