Vulnerabilities

TI-2026-27006 CVE-2026-34762 · GHSA-xw45-cc32-442f

Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber

LOW 13

Ella Core is a 5G core designed for private networks.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00192 Published 2026-04-02 Fixed in 1.8.0 CWE-20

TI-2026-27005 CVE-2026-34761 · GHSA-6gm8-3g4h-w82m

Ella Core Panics Upon NGAP handover failure

LOW 29

Ella Core is a 5G core designed for private networks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00329 Published 2026-04-02 Fixed in 1.8.0 CWE-476

TI-2026-26265 CVE-2026-33907 · GHSA-55q8-2gwx-29pc

Ella Core Panics during NAS Authentication Response/Failure with missing IEs

LOW 28

Ella Core is a 5G core designed for private networks.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00247 Published 2026-03-27 Fixed in 1.7.0 CWE-476

TI-2026-26264 CVE-2026-33906 · GHSA-87j9-m7x6-hvw2

Ella Core has Privilege Escalation via Database Restore by NetworkManager role

LOW 34

Ella Core is a 5G core designed for private networks.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00395 Published 2026-03-27 Fixed in 1.7.0 CWE-269

TI-2026-26262 CVE-2026-33904 · GHSA-9h59-p45g-445h

Ella Core has a Denial of Service via SCTP connection cleanup deadlock

LOW 28

Ella Core is a 5G core designed for private networks.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00173 Published 2026-03-27 Fixed in 1.7.0 CWE-833

TI-2026-26261 CVE-2026-33903 · GHSA-f2f3-9cx3-wcmf

Ella Core panics when processing a crafted NGAP LocationReport message

LOW 28

Ella Core is a 5G core designed for private networks.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00217 Published 2026-03-27 Fixed in 1.7.0 CWE-476

TI-2026-25694 CVE-2026-33283 · GHSA-3366-gw57-fcm5

Ella Core panics on malformed ULNASTransport Message without a Request Type

LOW 33

Ella Core is a 5G core designed for private networks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00379 Published 2026-03-23 Fixed in 1.6.0 CWE-476

TI-2026-25693 CVE-2026-33282 · GHSA-826q-wrq4-p23x

Ella Core panics on malformed NGAP Location Report

LOW 33

Ella Core is a 5G core designed for private networks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2026-03-23 Fixed in 1.6.0 CWE-476

TI-2026-25692 CVE-2026-33281 · GHSA-q669-4gmv-g8mf

Ella Core panics on invalid PDU Session IDs in NGAP messages

LOW 33

Ella Core is a 5G core designed for private networks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00409 Published 2026-03-23 Fixed in 1.6.0 CWE-129

TI-2026-24848 CVE-2026-32320 · GHSA-j478-p7vq-3347

Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings

LOW 32

Ella Core is a 5G core designed for private networks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00202 Published 2026-03-12 Fixed in 1.5.1 CWE-125

TI-2026-24847 CVE-2026-32319 · GHSA-m9pm-w3gv-c68f

Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

LOW 39

Ella Core is a 5G core designed for private networks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00348 Published 2026-03-12 Fixed in 1.5.1 CWE-125

Vulnerabilities

Filters