VulnSocial

CVE-2026-33903Disclosure(ellanetworks / ella_core)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. Version 1.7.0 adds guards in NGAP Location Report handler.

ellanetworks CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ella_core

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-03-27); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
ellanetworks
Products
ella_core

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-27: 1Mentions · 2026-03-28: 1Technical Details · 2026-03-27: 1Technical Details · 2026-03-28: 103-2703-28
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-33903 Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message. An attacker able … https://www.cve.org/CVERecord?id=CVE-2026-33903

    Post summary

    A brief disclosure notes that Ella Core 5G core versions earlier than 1.7.0 crash when handling a crafted NGAP LocationReport message, indicating a vulnerability that could lead to a panic, with reference to the CVE record.

    00000188
    56.9K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-33903 - Ella Core panics when processing a crafted NGAP LocationReport message Intel Report: https://ift.tt/kBCjlMm

    Post summary

    An alert reports CVE-2026-33903 causing a panic in Ella Core when handling crafted NGAP LocationReport messages; no PoC, exploitation, or patch details are provided.

    0000032
    285 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appellanetworksella_core---

Explore more

Back to dashboardellanetworks CVEsella_core vulnerabilities