CVE-2026-96274

🔴 Baicells 4G Base Station Vulnerable to Denial-of-Service Attack; No Patch Planned Baicells Nova 430H eNodeB (model pBS3101SH) running firmware version BaiBLQ_3.0.12 and earlier contains an unauthenticated denial-of-service vulnerability (CVE-2026-96274). An attacker within radio range can send a malformed uplink message with an invalid NAS payload during connection setup, causing the base station to forward it to the core network and trigger a shutdown of the cell's signaling association, resulting in temporary service disruption. Baicells has not engaged with CISA to develop a fix.