Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.8 CVE-2026-42359

Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator_CVE-2026-42359

A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permission on ...

Apache Software Foundation Apache Airflow 3.2.0 CVE
HIGH 7.5 CVE-2026-37233

CVE-2026-37233_CVE-2026-37233

FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/...

n/a n/a n/a CVE
HIGH 8.6 CVE-2026-37232

CVE-2026-37232_CVE-2026-37232

An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation. The functions...

OpenAirInterface OpenAirInterface5G 2.4.0 CVE
HIGH 7.5 CVE-2026-37231

CVE-2026-37231_CVE-2026-37231

FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,530+ E42_SETUP_REQUESTs, th...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-37230

CVE-2026-37230_CVE-2026-37230

FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry. The lookup re...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-37229

CVE-2026-37229_CVE-2026-37229

FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. A remote unauthenticated attacker can s...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-37228

CVE-2026-37228_CVE-2026-37228

FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a fixed 32KB receive buffer an...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-37226

CVE-2026-37226_CVE-2026-37226

FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL,...

n/a n/a n/a CVE
HIGH 8.2 CVE-2026-37234

CVE-2026-37234_CVE-2026-37234

FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs. On disconnect, only the first regi...

n/a n/a n/a CVE
HIGH 7.5 CVE-2025-70099

CVE-2025-70099_CVE-2025-70099

A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of ser...

n/a n/a n/a CVE