Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.6 CVE-2026-37232

CVE-2026-37232_CVE-2026-37232

An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation. The functions...

OpenAirInterface OpenAirInterface5G 2.4.0 CVE
HIGH 7.5 CVE-2026-37231

CVE-2026-37231_CVE-2026-37231

FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,530+ E42_SETUP_REQUESTs, th...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-37230

CVE-2026-37230_CVE-2026-37230

FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry. The lookup re...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-37229

CVE-2026-37229_CVE-2026-37229

FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. A remote unauthenticated attacker can s...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-37228

CVE-2026-37228_CVE-2026-37228

FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a fixed 32KB receive buffer an...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-37226

CVE-2026-37226_CVE-2026-37226

FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL,...

n/a n/a n/a CVE
HIGH 8.2 CVE-2026-37234

CVE-2026-37234_CVE-2026-37234

FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs. On disconnect, only the first regi...

n/a n/a n/a CVE
HIGH 7.5 CVE-2025-70099

CVE-2025-70099_CVE-2025-70099

A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of ser...

n/a n/a n/a CVE
HIGH 7.8 CVE-2026-0087

CVE-2026-0087_CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error i...

Google Android 16-qpr2 CVE
HIGH 7.8 CVE-2026-0078

CVE-2026-0078_CVE-2026-0078

In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead t...

Google Android 16-qpr2 CVE