CVE-2026-37220
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-37220
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
FlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent. The near-RT RIC assumes a mapping between SCTP association and E2 node always exists in the cleanup path and enforces this via assert(). A remote unauthenticated attacker can crash the near-RT RIC (port 36421) by simply completing an SCTP handshake and immediately disconnecting, without sending any E2AP message.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2026-37220
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-37220
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-37220 (1)
Other References for CVE-2026-37220 (1)
Same Patch Batch · n/a · 2026-06-01 · 33 CVEs total
| CVE-2026-10273 | 7.3 HIGH | php-censor Webhook Endpoint GitBuild.php os command injection |
| CVE-2026-10240 | 6.3 MEDIUM | JeecgBoot test server-side request forgery |
| CVE-2026-10239 | 6.3 MEDIUM | JeecgBoot edit WordUtil.addImage server-side request forgery |
| CVE-2026-10232 | 5.3 MEDIUM | Assimp ASE File scene.cpp ~aiNode use after free |
| CVE-2026-10231 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow |
| CVE-2026-10230 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow |
| CVE-2026-10229 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow |
| CVE-2026-10275 | 5.0 MEDIUM | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow |
| CVE-2026-10233 | 3.3 LOW | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-bounds |
| CVE-2026-37222 | FlexRIC v2.0.0近实时RIC远程拒绝服务漏洞 | |
| CVE-2025-70099 | lwext4 1.0.0空指针解引用导致拒绝服务 | |
| CVE-2026-37235 | FlexRIC v2.0.0 远程未认证身份伪造漏洞 | |
| CVE-2026-37232 | OpenAirInterface5G 2.4.0空指针除零致基站崩溃 | |
| CVE-2026-37228 | FlexRIC v2.0.0断言绕过漏洞 | |
| CVE-2026-37226 | FlexRIC v2.0.0远程未认证拒绝服务漏洞 | |
| CVE-2026-37233 | FlexRIC v2.0.0 xApp隔离机制授权绕过漏洞 | |
| CVE-2026-37231 | FlexRIC v2.0.0 xApp ID重复导致iApp崩溃 | |
| CVE-2026-37229 | FlexRIC v2.0.0 E2AP协议拒绝服务漏洞 | |
| CVE-2026-37230 | FlexRIC v2.0.0近实时RIC远程拒绝服务漏洞 | |
| CVE-2026-37234 | FlexRIC v2.0.0 SCTP资源泄露漏洞 |
Showing top 20 of 33 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-10275
OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_c - CVE-2026-10273
php-censor Webhook Endpoint GitBuild.php os command injectio - CVE-2026-10240
JeecgBoot test server-side request forgery - CVE-2026-10239
JeecgBoot edit WordUtil.addImage server-side request forgery - CVE-2026-10233
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence
V. Comments for CVE-2026-37220
No comments yet