{"schema_version":1,"title":"EURECOM FlexRIC vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 15 vulnerabilities in EURECOM FlexRIC: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-37234, was published on 1 June 2026.","url":"https://junglewise.ai/threats/technologies/flexric","json_url":"https://junglewise.ai/threats/technologies/flexric.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/flexric","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":15,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":15},"latest":[{"cve":"CVE-2026-37234","cvss":8.2,"slug":"cve-2026-37234-eurecom-flexric-resource-leak-via-multiple-xapp-identity-bindings","title":"EURECOM FlexRIC resource leak via multiple xApp identity bindings","severity":"info","exploited":false,"published_at":"2026-06-01T21:16:42.823+00:00","url":"https://junglewise.ai/threats/cve-2026-37234-eurecom-flexric-resource-leak-via-multiple-xapp-identity-bindings"},{"cve":"CVE-2026-37235","cvss":9.1,"slug":"cve-2026-37235-eurecom-flexric-xapp-impersonation-and-dos-in-iapp-component","title":"EURECOM FlexRIC xApp impersonation and DoS in iApp component","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.85+00:00","url":"https://junglewise.ai/threats/cve-2026-37235-eurecom-flexric-xapp-impersonation-and-dos-in-iapp-component"},{"cve":"CVE-2026-37233","cvss":8.2,"slug":"cve-2026-37233-eurecom-flexric-authorization-bypass-in-iapp-xapp-isolation","title":"EURECOM FlexRIC authorization bypass in iApp xApp isolation","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.743+00:00","url":"https://junglewise.ai/threats/cve-2026-37233-eurecom-flexric-authorization-bypass-in-iapp-xapp-isolation"},{"cve":"CVE-2026-37231","cvss":7.5,"slug":"cve-2026-37231-eurecom-flexric-denial-of-service-via-xapp-id-integer-wraparound","title":"EURECOM FlexRIC denial of service via xapp_id integer wraparound","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.517+00:00","url":"https://junglewise.ai/threats/cve-2026-37231-eurecom-flexric-denial-of-service-via-xapp-id-integer-wraparound"},{"cve":"CVE-2026-37230","cvss":7.5,"slug":"cve-2026-37230-eurecom-flexric-null-pointer-dereference-in-near-rt-ric","title":"EURECOM FlexRIC NULL pointer dereference in near-RT RIC","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.41+00:00","url":"https://junglewise.ai/threats/cve-2026-37230-eurecom-flexric-null-pointer-dereference-in-near-rt-ric"},{"cve":"CVE-2026-37229","cvss":7.5,"slug":"cve-2026-37229-eurecom-flexric-reachable-assertion-in-e2ap-create-pdu","title":"EURECOM FlexRIC reachable assertion in e2ap_create_pdu","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.293+00:00","url":"https://junglewise.ai/threats/cve-2026-37229-eurecom-flexric-reachable-assertion-in-e2ap-create-pdu"},{"cve":"CVE-2026-37228","cvss":7.5,"slug":"cve-2026-37228-eurecom-flexric-reachable-assertion-in-e2ap-recv-sctp-msg","title":"EURECOM FlexRIC reachable assertion in e2ap_recv_sctp_msg","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.187+00:00","url":"https://junglewise.ai/threats/cve-2026-37228-eurecom-flexric-reachable-assertion-in-e2ap-recv-sctp-msg"},{"cve":"CVE-2026-37226","cvss":8.6,"slug":"cve-2026-37226-eurecom-flexric-null-pointer-dereference-in-iapp-subscription","title":"EURECOM FlexRIC null pointer dereference in iApp subscription handling","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.08+00:00","url":"https://junglewise.ai/threats/cve-2026-37226-eurecom-flexric-null-pointer-dereference-in-iapp-subscription"},{"cve":"CVE-2026-37227","cvss":7.5,"slug":"cve-2026-37227-eurecom-flexric-denial-of-service-via-reachable-assertions-in","title":"EURECOM FlexRIC denial of service via reachable assertions in E2AP handlers","severity":"info","exploited":false,"published_at":"2026-06-01T17:16:58.993+00:00","url":"https://junglewise.ai/threats/cve-2026-37227-eurecom-flexric-denial-of-service-via-reachable-assertions-in"},{"cve":"CVE-2026-37225","cvss":7.5,"slug":"cve-2026-37225-eurecom-flexric-denial-of-service-via-validation-mismatch-in-iapp","title":"EURECOM FlexRIC denial of service via validation mismatch in iApp","severity":"info","exploited":false,"published_at":"2026-06-01T17:16:58.88+00:00","url":"https://junglewise.ai/threats/cve-2026-37225-eurecom-flexric-denial-of-service-via-validation-mismatch-in-iapp"},{"cve":"CVE-2026-37224","cvss":7.5,"slug":"cve-2026-37224-eurecom-flexric-denial-of-service-via-duplicate-e2-setup-request","title":"EURECOM FlexRIC denial of service via duplicate E2 setup request","severity":"info","exploited":false,"published_at":"2026-06-01T17:16:58.76+00:00","url":"https://junglewise.ai/threats/cve-2026-37224-eurecom-flexric-denial-of-service-via-duplicate-e2-setup-request"},{"cve":"CVE-2026-37223","cvss":7.5,"slug":"cve-2026-37223-eurecom-flexric-reachable-assertion-in-iapp-message-dispatcher","title":"EURECOM FlexRIC reachable assertion in iApp message dispatcher","severity":"info","exploited":false,"published_at":"2026-06-01T17:16:58.647+00:00","url":"https://junglewise.ai/threats/cve-2026-37223-eurecom-flexric-reachable-assertion-in-iapp-message-dispatcher"},{"cve":"CVE-2026-37222","cvss":7.5,"slug":"cve-2026-37222-eurecom-flexric-denial-of-service-via-ie-count-assertion-in-e2ap","title":"EURECOM FlexRIC denial of service via IE count assertion in E2AP decoder","severity":"info","exploited":false,"published_at":"2026-06-01T17:16:58.527+00:00","url":"https://junglewise.ai/threats/cve-2026-37222-eurecom-flexric-denial-of-service-via-ie-count-assertion-in-e2ap"},{"cve":"CVE-2026-37221","cvss":7.5,"slug":"cve-2026-37221-eurecom-flexric-denial-of-service-via-forged-subscription","title":"EURECOM FlexRIC denial of service via forged subscription response","severity":"info","exploited":false,"published_at":"2026-06-01T15:16:34.273+00:00","url":"https://junglewise.ai/threats/cve-2026-37221-eurecom-flexric-denial-of-service-via-forged-subscription"},{"cve":"CVE-2026-37220","cvss":7.5,"slug":"cve-2026-37220-eurecom-flexric-reachable-assertion-in-sctp-notification-handler","title":"EURECOM FlexRIC reachable assertion in SCTP notification handler","severity":"info","exploited":false,"published_at":"2026-06-01T15:16:34.163+00:00","url":"https://junglewise.ai/threats/cve-2026-37220-eurecom-flexric-reachable-assertion-in-sctp-notification-handler"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"EURECOM FlexRIC","slug":"flexric","vendor":{"name":"EURECOM","slug":"eurecom","url":"https://junglewise.ai/threats/vendors/eurecom"},"aliases":[],"category":"library","homepage":"https://mosaic-5g.io/flexric/","repo_url":"https://gitlab.eurecom.fr/mosaic5g/flexric","description":"FlexRIC is a flexible and customizable Software-Defined Radio (SDR) controller for Open Radio Access Networks (O-RAN).","url":"https://junglewise.ai/threats/technologies/flexric"},"most_severe":[{"cve":"CVE-2026-37235","cvss":9.1,"slug":"cve-2026-37235-eurecom-flexric-xapp-impersonation-and-dos-in-iapp-component","title":"EURECOM FlexRIC xApp impersonation and DoS in iApp component","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.85+00:00","url":"https://junglewise.ai/threats/cve-2026-37235-eurecom-flexric-xapp-impersonation-and-dos-in-iapp-component"},{"cve":"CVE-2026-37226","cvss":8.6,"slug":"cve-2026-37226-eurecom-flexric-null-pointer-dereference-in-iapp-subscription","title":"EURECOM FlexRIC null pointer dereference in iApp subscription handling","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.08+00:00","url":"https://junglewise.ai/threats/cve-2026-37226-eurecom-flexric-null-pointer-dereference-in-iapp-subscription"},{"cve":"CVE-2026-37234","cvss":8.2,"slug":"cve-2026-37234-eurecom-flexric-resource-leak-via-multiple-xapp-identity-bindings","title":"EURECOM FlexRIC resource leak via multiple xApp identity bindings","severity":"info","exploited":false,"published_at":"2026-06-01T21:16:42.823+00:00","url":"https://junglewise.ai/threats/cve-2026-37234-eurecom-flexric-resource-leak-via-multiple-xapp-identity-bindings"},{"cve":"CVE-2026-37233","cvss":8.2,"slug":"cve-2026-37233-eurecom-flexric-authorization-bypass-in-iapp-xapp-isolation","title":"EURECOM FlexRIC authorization bypass in iApp xApp isolation","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.743+00:00","url":"https://junglewise.ai/threats/cve-2026-37233-eurecom-flexric-authorization-bypass-in-iapp-xapp-isolation"},{"cve":"CVE-2026-37231","cvss":7.5,"slug":"cve-2026-37231-eurecom-flexric-denial-of-service-via-xapp-id-integer-wraparound","title":"EURECOM FlexRIC denial of service via xapp_id integer wraparound","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.517+00:00","url":"https://junglewise.ai/threats/cve-2026-37231-eurecom-flexric-denial-of-service-via-xapp-id-integer-wraparound"},{"cve":"CVE-2026-37230","cvss":7.5,"slug":"cve-2026-37230-eurecom-flexric-null-pointer-dereference-in-near-rt-ric","title":"EURECOM FlexRIC NULL pointer dereference in near-RT RIC","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.41+00:00","url":"https://junglewise.ai/threats/cve-2026-37230-eurecom-flexric-null-pointer-dereference-in-near-rt-ric"},{"cve":"CVE-2026-37229","cvss":7.5,"slug":"cve-2026-37229-eurecom-flexric-reachable-assertion-in-e2ap-create-pdu","title":"EURECOM FlexRIC reachable assertion in e2ap_create_pdu","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.293+00:00","url":"https://junglewise.ai/threats/cve-2026-37229-eurecom-flexric-reachable-assertion-in-e2ap-create-pdu"},{"cve":"CVE-2026-37228","cvss":7.5,"slug":"cve-2026-37228-eurecom-flexric-reachable-assertion-in-e2ap-recv-sctp-msg","title":"EURECOM FlexRIC reachable assertion in e2ap_recv_sctp_msg","severity":"info","exploited":false,"published_at":"2026-06-01T19:16:33.187+00:00","url":"https://junglewise.ai/threats/cve-2026-37228-eurecom-flexric-reachable-assertion-in-e2ap-recv-sctp-msg"},{"cve":"CVE-2026-37227","cvss":7.5,"slug":"cve-2026-37227-eurecom-flexric-denial-of-service-via-reachable-assertions-in","title":"EURECOM FlexRIC denial of service via reachable assertions in E2AP handlers","severity":"info","exploited":false,"published_at":"2026-06-01T17:16:58.993+00:00","url":"https://junglewise.ai/threats/cve-2026-37227-eurecom-flexric-denial-of-service-via-reachable-assertions-in"},{"cve":"CVE-2026-37225","cvss":7.5,"slug":"cve-2026-37225-eurecom-flexric-denial-of-service-via-validation-mismatch-in-iapp","title":"EURECOM FlexRIC denial of service via validation mismatch in iApp","severity":"info","exploited":false,"published_at":"2026-06-01T17:16:58.88+00:00","url":"https://junglewise.ai/threats/cve-2026-37225-eurecom-flexric-denial-of-service-via-validation-mismatch-in-iapp"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}