CVE-2026-37223

FlexRIC v2.0.0 is vulnerable to a service disruption due to a reachable assertion in the iApp message dispatcher . The dispatcher uses assert() to validate incoming E2AP messages against a 9-entry whitelist. A remote unauthenticated attacker can trigger a SIGABRT crash by sending a decodable E2AP...

Mosaic5G Flexric: Improper exception handling leads to vulnerabilities

FlexRIC is an open-source RAN intelligent controller developed by Mosaic5G. Version FlexRIC v2.0.0 contains a security vulnerability. This vulnerability stems from the iApp message distributor using assert for validation of the allowlist, which may allow remote unauthenticated attackers to send...