CVE-2026-37234

Name of the Vulnerable Software and Affected Versions FlexRIC version 2.0.0

Description A flaw allows a single SCTP connection to bind multiple xapp ids by sending multiple E42 SETUP REQUESTs. Upon disconnection, the system only cleans up resources for the first registered xapp id, leaving subsequent xapp ids and their subscriptions as stale entries. A remote attacker can exploit this to leak subscription state in the iApp, which may lead to state corruption or resource exhaustion over time.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.