CVE-2026-37234 — HIGH (8.2)

Vulnerability Description

FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs. On disconnect, only the first registered xapp_id's resources are cleaned up; subsequent xapp_ids and their subscriptions remain as stale entries. A remote attacker can exploit this to leak subscription state in the iApp, potentially causing resource exhaustion or state corruption over time.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

HIGH

Affected Products

Vendor	Product	Versions
Mosaic5G	Flexric	2.0.0

Related Weaknesses (CWE)

CWE-400

References

https://github.com/MinamiKotor1/oran-security-advisories-zhongnan-luo/blob/main/ExploitMitigationThird Party Advisory
https://gitlab.eurecom.fr/mosaic5g/flexricProduct

FAQ

What is CVE-2026-37234?

CVE-2026-37234 is a vulnerability with a CVSS score of 8.2 (HIGH). FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs. On disconnect, only the first registered xapp_id's resources are cleaned up; subsequent...

How severe is CVE-2026-37234?

CVE-2026-37234 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-37234?

Check the references section above for vendor advisories and patch information. Affected products include: Mosaic5G Flexric.