Ellanetworks vulnerabilities

Products

• Core 14
• Ella Core 11

Newest

• ellanetworks core Ella Core: Handover failures during concurrent Security Mode Command CVE-2026-44474 Fix available 3.7 LowMay 11, 2026
• ellanetworks core Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest CVE-2026-44475 Fix available 6.1 MediumMay 11, 2026
• ellanetworks core Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse CVE-2026-44473 Fix available 7.1 HighMay 11, 2026
• ellanetworks core, ella core +1 more Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber CVE-2026-34762 Fix available 2.7 LowApril 1, 2026
• ellanetworks core, ella core +1 more Ella Core Panics Upon NGAP handover failure CVE-2026-34761 Fix available 5.8 MediumApril 1, 2026
• ellanetworks core, ella core +1 more Ella Core Panics during NAS Authentication Response/Failure with missing IEs CVE-2026-33907 Fix available 6.5 MediumMarch 26, 2026
• ellanetworks core, ella core +1 more Ella Core has Privilege Escalation via Database Restore by NetworkManager role CVE-2026-33906 Fix available 7.2 HighMarch 26, 2026
• ellanetworks core, ella core +1 more Ella Core has a Denial of Service via SCTP connection cleanup deadlock CVE-2026-33904 Fix available 6.5 MediumMarch 26, 2026
• ellanetworks core, ella core +1 more Ella Core panics when processing a crafted NGAP LocationReport message CVE-2026-33903 Fix available 6.5 MediumMarch 26, 2026
• ellanetworks core, ella core +1 more Ella Core panics on malformed ULNASTransport Message without a Request Type CVE-2026-33283 Fix available 6.5 MediumMarch 19, 2026
• ellanetworks core, ella core +1 more Ella Core panics on malformed NGAP Location Report CVE-2026-33282 Fix available 7.5 HighMarch 19, 2026
• ellanetworks core, ella core +1 more Ella Core panics on invalid PDU Session IDs in NGAP messages CVE-2026-33281 Fix available 6.5 MediumMarch 19, 2026
• ellanetworks core, ella core +1 more Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings CVE-2026-32320 Fix available 6.5 MediumMarch 12, 2026
• ellanetworks core, ella core +1 more Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload CVE-2026-32319 Fix available 7.5 HighMarch 12, 2026