CVE-2026-37232
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1498 · Network Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-37232
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation. The functions fill_RRU_PrbTotDl() and fill_RRU_PrbTotUl() in openair2/E2AP/RAN_FUNCTION/O-RAN/ran_func_kpm_subs.c (lines 182 and 197) compute PRB usage percentages by dividing by the difference of two consecutive total_prb_aggregate samples without checking for zero. When a malicious xApp sends a high volume of E42_RIC_SUBSCRIPTION_REQUESTs via the FlexRIC iApp (port 36422/SCTP), the E2 Agent generates KPM Indication reports at high frequency. If two consecutive sampling intervals yield identical PRB aggregate values, the divisor becomes zero, triggering SIGFPE and crashing the entire 5G base station process (nr-softmodem). This results in complete 5G cell service interruption for all connected UEs. No authentication is required.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
openairinterface5G 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
openairinterface5G是oai开源的一个开源的5G网络软件实现，支持5G NR（New Radio）核心网和接入网的全栈研究、开发与测试。 openairinterface5G 2.4.0版本存在安全漏洞，该漏洞源于E2SM-KPM RAN功能中PRB利用率计算未检查除零，可能导致恶意xApp发送大量订阅请求后采样间隔内PRB聚合值相同触发SIGFPE导致5G基站进程崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2026-37232
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-37232
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-37232 (1)
Other References for CVE-2026-37232 (1)
Same Patch Batch · n/a · 2026-06-01 · 35 CVEs total
| CVE-2026-10273 | 7.3 HIGH | php-censor Webhook Endpoint GitBuild.php os command injection |
| CVE-2026-10240 | 6.3 MEDIUM | JeecgBoot test server-side request forgery |
| CVE-2026-10239 | 6.3 MEDIUM | JeecgBoot edit WordUtil.addImage server-side request forgery |
| CVE-2026-10229 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow |
| CVE-2026-10232 | 5.3 MEDIUM | Assimp ASE File scene.cpp ~aiNode use after free |
| CVE-2026-10231 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow |
| CVE-2026-10230 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow |
| CVE-2026-10275 | 5.0 MEDIUM | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow |
| CVE-2026-10294 | 4.3 MEDIUM | PackageKit API pk-transaction.c g_file_test improper authorization |
| CVE-2026-10300 | 3.7 LOW | SGLang Inference HTTP Endpoint lora_manager.py assertion |
| CVE-2026-10233 | 3.3 LOW | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-bounds |
| CVE-2025-70099 | lwext4 安全漏洞 | |
| CVE-2026-37234 | FlexRIC 安全漏洞 | |
| CVE-2026-37230 | FlexRIC 安全漏洞 | |
| CVE-2026-37229 | FlexRIC 安全漏洞 | |
| CVE-2026-37231 | FlexRIC 安全漏洞 | |
| CVE-2026-37233 | FlexRIC 安全漏洞 | |
| CVE-2026-37226 | FlexRIC 安全漏洞 | |
| CVE-2026-37228 | FlexRIC 安全漏洞 | |
| CVE-2026-37235 | FlexRIC 安全漏洞 |
Showing top 20 of 35 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-37232
No comments yet