CVE-2026-33907Disclosure(ellanetworks / ella_core)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.7.0 added IE presence verification to NAS message handling.

ellanetworks CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/ellanetworks/core/commit/52962660e3bd3e23c7e96b0da270ac1e0e705273

Vendor / third-party advisories

https://github.com/ellanetworks/core/security/advisories/GHSA-55q8-2gwx-29pc

Other references

https://github.com/ellanetworks/core/releases/tag/v1.7.0

Weakness type (CWE)

CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ella_core

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

ellanetworks

Products

ella_core

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-33907

Full discourse1 post

CVE@CVEnew194d
Disclosure
CVE-2026-33907 Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message mis… https://www.cve.org/CVERecord?id=CVE-2026-33907
Post summary
The post announces a crash vulnerability (CVE‑2026‑33907) in Ella Core 5G core affecting versions older than 1.7.0 during NAS authentication message handling, with no PoC, exploit, or active exploitation details provided.
00010197
56.9K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ellanetworks	ella_core	-	-	-

Explore more

Back to dashboard ellanetworks CVEs ella_core vulnerabilities