Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association. The validation function valid_xapp_id() only checks that the value is within the assigned range. A remote unauthenticated attacker can impersonate any xApp by specifying their xapp_id in requests sent to the iApp (port 36422), causing responses to be misrouted to the victim xApp. This can crash the victim xApp, the RIC, or the iApp itself through state inconsistencies in the red-black tree data structure.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🚨 HIGH: CVE-2026-37235 (CVSS 7.5) - FlexRIC v2[.]0[.]0 authentication bypass allows remote attackers to impersonate xApps, causing DoS via state corruption. No auth required. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/ofy5hiULdE
Post summary
The tweet announces a high‑severity CVE with authentication bypass and DoS potential, urging immediate patching.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mosaic5g | flexric | 2.0.0 | - | - |