Is CVE-2026-37231 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-37231 being exploited in the wild.

How severe is CVE-2026-37231?

Informational severity, with a CVSS score of 7.5, published 1 June 2026.

Which products and versions are affected?

EURECOM FlexRIC 2.0.0 through commit 6a595d8b.

Is there a fix for CVE-2026-37231?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-37231 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-37231?

Check whether you run EURECOM FlexRIC at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-37231: EURECOM FlexRIC denial of service via xapp_id integer wraparound

CVE-2026-37231 · Severity: info · CVSS 7.5 · Published 2026-06-01

FlexRIC, a controller used in Open RAN cellular networks to manage radio applications (xApps), is vulnerable to a denial-of-service attack. An attacker can repeatedly request new application registrations, causing an internal counter to overflow and produce duplicate identification numbers. When the system attempts to register a duplicate ID, the controller crashes, potentially disrupting cellular network management and operations.

Technologies: EURECOM FlexRIC. Vendors: EURECOM.

Quick answers

Is CVE-2026-37231 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-37231 being exploited in the wild.
How severe is CVE-2026-37231?: Informational severity, with a CVSS score of 7.5, published 1 June 2026.
Which products and versions are affected?: EURECOM FlexRIC 2.0.0 through commit 6a595d8b.
Is there a fix for CVE-2026-37231?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-37231 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-37231?: Check whether you run EURECOM FlexRIC at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

FlexRIC v2.0.0 (and versions through commit 6a595d8b) contains an integer truncation and wraparound vulnerability in the iApp component. While the internal counter for xapp_id is stored in a 32-bit field, it is assigned using a 16-bit logic that wraps around after approximately 65,530 E42_SETUP_REQUEST messages. A remote attacker can trigger this by repeatedly sending setup requests over SCTP to port 36422. When the counter wraps and generates a duplicate ID, the iApp process hits a uniqueness assertion in map_xapps_sockaddr.c and aborts, resulting in a complete denial of service. No official patch was available at the time of the advisory.

Affected products

EURECOM FlexRIC 2.0.0 through commit 6a595d8b

Timeline

2026-06-01: disclosed
2026-06-01: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.