Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
Mosaic5g records in CISA KEVNo Mosaic5g vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 42
FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00407 · Published 2026-06-01 · No fix listed CWE-400
Priority MEDIUM 40
FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0057 · Published 2026-06-01 · No fix listed CWE-284
Priority MEDIUM 40
FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00642 · Published 2026-06-01 · No fix listed CWE-476
Priority MEDIUM 40
FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00624 · Published 2026-06-01 · No fix listed CWE-617
Priority MEDIUM 40
FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00642 · Published 2026-06-01 · No fix listed CWE-617
Priority MEDIUM 40
FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00642 · Published 2026-06-01 · No fix listed CWE-476
Priority LOW 39
FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00454 · Published 2026-06-01 · No fix listed CWE-617
Priority LOW 39
FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00488 · Published 2026-06-01 · No fix listed CWE-191
THREATIST.IORead the docs