CVE-2026-33904Disclosure(ellanetworks / ella_core)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to hang until the process is restarted. An attacker with access to the N2 interface can cause Ella Core to hang, resulting in a denial of service for all subscribers. Version 1.7.0 adds deferred Radio cleanup in serveConn SCTP server so that every connection exit path removes the radio. Remove the stale-entry scan from SCTP Notification handling.

ellanetworks CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/ellanetworks/core/commit/999f606c5cae261471d9e3f063d7ecd1bd754076

Vendor / third-party advisories

https://github.com/ellanetworks/core/security/advisories/GHSA-9h59-p45g-445h

Other references

https://github.com/ellanetworks/core/releases/tag/v1.7.0

Weakness type (CWE)

CWE-833

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ella_core

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

ellanetworks

Products

ella_core

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-33904

Full discourse1 post

CVE@CVEnew194d
Disclosure
CVE-2026-33904 Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to… https://www.cve.org/CVERecord?id=CVE-2026-33904
Post summary
The post describes a deadlock vulnerability in Ella Core’s AMF SCTP notification handler that disrupts the AMF control plane before version 1.7.0, with no evidence of exploitation or mitigation provided.
00000368
56.9K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ellanetworks	ella_core	-	-	-

Explore more

Back to dashboard ellanetworks CVEs ella_core vulnerabilities