CVE-2026-33281Ella Core panics on invalid PDU Session IDs in NGAP messages
Updated under an hour ago ()
Does this affect you?
It affects ellanetworks core and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing NGAP messages with invalid PDU Session IDs outside of 1-15. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.6.0 added PDU Session ID validations during NGAP message handling.
- CVSS
- 6.5 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-129
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- GitHub_M
- NVD analysis
- Analyzed
- Record last updated
- Mar 24, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
ellanetworks core ellanetworks:core (from the name) | before 1.6.0 | CNA record |
ellanetworks ella_core ellanetworks:ella_core | before 1.6.0 | NVD |
References
- https://github.com/ellanetworks/core/security/advisories/GHSA-q669-4gmv-g8mfx-refsource-confirm, vendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.