CVE-2026-8783 — Omec-Project Amf Null Pointer Dereference

title: CVE-2026-8783 - Omec-Project AMF UERadioCapabilityCheckResponse Null Pointer Dereference
id: scw-2026-05-18-ai-1
status: experimental
level: high
description: |
  This rule detects attempts to exploit CVE-2026-8783 by targeting the UERadioCapabilityCheckResponse function within the ngap/dispatcher.go file of Omec-Project AMF. The vulnerability, a null pointer dereference, can be triggered remotely via specific requests to this endpoint, potentially leading to denial of service or further compromise. This detection focuses on the specific URI path and query parameter associated with the vulnerable function.
author: SCW Feed Engine (AI-generated)
date: 2026-05-18
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-8783/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-uri|contains:
          - '/ngap/dispatcher.go'
      cs-uri-query|contains:
          - 'UERadioCapabilityCheckResponse'
  condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse