Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing NGAP messages with invalid PDU Session IDs outside of 1-15. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.6.0 added PDU Session ID validations during NGAP message handling.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-33281 📊 Severity: 6.5 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-33281 #CVE-2026-33281 #CVE #Medium #CyberSecurity #InfoSec https://t.co/kRD3yay13R
Post summary
A tweet announces CVE‑2026‑33281, noting its medium severity (6.5) and referencing the NVD but providing no further technical details, PoC, or exploitation information.
CVE-2026-33281 Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing NGAP messages with invalid PDU Session IDs outside of 1-15. An att… https://www.cve.org/CVERecord?id=CVE-2026-33281
Post summary
This entry discloses CVE‑2026‑33281, which triggers a panic in Ella Core 5G core when it receives NGAP messages with invalid PDU Session IDs outside 1‑15; no PoC, exploit, patch, or active exploitation is reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ellanetworks | ella_core | - | - | - |