CVE-2026-37224

Name of the Vulnerable Software and Affected Versions FlexRIC version 2.0.0

Description The iApp process on port 36421 crashes when it receives a duplicate E2 SETUP REQUEST from the same or a spoofed E2 Node. This occurs because the iApp registry uses an assert() function to enforce node ID uniqueness instead of implementing a controlled rejection. A remote unauthenticated attacker can trigger a SIGABRT (a signal sent to a process to force it to abort) by sending two E2 SETUP REQUESTs with identical E2 node configurations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.