https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 10:21:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-323981 EUVD-2026-323981 https://cve.radiocsirt.org/vuln/euvd-2026-323981 https://cve.radiocsirt.org/vuln/fkie_cve-2026-37233 <p>FlexRIC v2.0.0 contains an authorization bypass in the iApp&#39;s xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0-&gt;xapp_id against itself (m0-&gt;xapp_id) instead of the other argument (m1-&gt;xapp_id), effectively ignoring the xApp identity dimension. A malicious xApp connected to the iApp (port 36422) can delete any other xApp&#39;s subscriptions by sending an E42_RIC_SUBSCRIPTION_DELETE_REQUEST with a matching ric_gen_id. This breaks multi-tenant isolation in any deployment with multiple xApps sharing the same RIC.</p> <p>FlexRIC v2.0.0 contains an authorization bypass in the iApp&#39;s xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0-&gt;xapp_id against itself (m0-&gt;xapp_id) instead of the other argument (m1-&gt;xapp_id), effectively ignoring the xApp identity dimension. A malicious xApp connected to the iApp (port 36422) can delete any other xApp&#39;s subscriptions by sending an E42_RIC_SUBSCRIPTION_DELETE_REQUEST with a matching ric_gen_id. This breaks multi-tenant isolation in any deployment with multiple xApps sharing the same RIC.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-37233 https://cve.radiocsirt.org/vuln/ghsa-x4wc-gh9m-xgxw <p>FlexRIC v2.0.0 contains an authorization bypass in the iApp&#39;s xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0-&gt;xapp_id against itself (m0-&gt;xapp_id) instead of the other argument (m1-&gt;xapp_id), effectively ignoring the xApp identity dimension. A malicious xApp connected to the iApp (port 36422) can delete any other xApp&#39;s subscriptions by sending an E42_RIC_SUBSCRIPTION_DELETE_REQUEST with a matching ric_gen_id. This breaks multi-tenant isolation in any deployment with multiple xApps sharing the same RIC.</p> <p>FlexRIC v2.0.0 contains an authorization bypass in the iApp&#39;s xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0-&gt;xapp_id against itself (m0-&gt;xapp_id) instead of the other argument (m1-&gt;xapp_id), effectively ignoring the xApp identity dimension. A malicious xApp connected to the iApp (port 36422) can delete any other xApp&#39;s subscriptions by sending an E42_RIC_SUBSCRIPTION_DELETE_REQUEST with a matching ric_gen_id. This breaks multi-tenant isolation in any deployment with multiple xApps sharing the same RIC.</p> https://cve.radiocsirt.org/vuln/ghsa-x4wc-gh9m-xgxw