# CVE-2026-30079: In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration…

Source: https://junglewise.ai/threats/cve-2026-30079-in-openairinterface-v2-2-0-amf-out-of-sequence-messages-causes  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-07  
License: CC BY 4.0 with a link back

CVE-2026-30079 · Severity: critical · CVSS 9.8 · Published 2026-04-07

In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure. This allows authentication to be bypassed completely. If a SecurityModeComplete message is sent after InitialUERegistration, a registration reject is received followed by a registration accept! This leads the UE to be registered without proper authentication.

Technologies: [Openairinterface Oai-Cn5g-Amf](https://junglewise.ai/threats/technologies/oai-cn5g-amf). Vendors: [Openairinterface](https://junglewise.ai/threats/vendors/openairinterface).

## Quick answers

**Is CVE-2026-30079 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-30079 being exploited in the wild.

**How severe is CVE-2026-30079?** Critical severity, with a CVSS score of 9.8, published 7 April 2026.

**Which products and versions are affected?** Openairinterface Oai-Cn5g-Amf. The advisory does not name versions.

**Is there a fix for CVE-2026-30079?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-30079?** Check whether you run Openairinterface Oai-Cn5g-Amf. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Openairinterface Oai-Cn5g-Amf

## Related threats

- [OpenAirInterface AMF integrity protection bypass in Security Mode Control](https://junglewise.ai/threats/cve-2026-30080-openairinterface-amf-integrity-protection-bypass-in-security-mode)
- [OpenAirInterface AUSF buffer overflow in UplinkNASTransport processing](https://junglewise.ai/threats/cve-2026-30075-openairinterface-ausf-buffer-overflow-in-uplinknastransport)
- [OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote…](https://junglewise.ai/threats/cve-2025-66786-openairinterface-cn5g-amf-v2-0-1-there-is-a-logical-error-when)
- [OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote…](https://junglewise.ai/threats/cve-2025-65805-openairinterface-cn5g-amf-v2-1-9-has-a-buffer-overflow)