CVE-2026-37222

FlexRIC v2.0.0 uses hardcoded assertions to validate Information Element IE counts in decoded E2AP messages. A remote unauthenticated attacker can send a valid E2AP PDU containing an unexpected number of IEs e.g., an E2setupRequest with extra optional fields to crash the near-RT RIC port 36421 or...

CVE-2026-37222

The FlexRIC v2.0.0 RAN intelligent controller contains a vulnerability where it uses hardcoded assertions to validate Information Element (IE) counts in decoded E2AP messages instead of validating against protocol-specified ranges. A remote unauthenticated attacker can exploit this by sending a v...