What’s Vulnerable › Products

ellanetworks core vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your ellanetworks core version is affected

Latest ellanetworks core vulnerabilities

• CVE-2026-44475 — Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest (CVSS 6.1)
• CVE-2026-44474 — Ella Core: Handover failures during concurrent Security Mode Command (CVSS 3.7)
• CVE-2026-44473 — Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse (CVSS 7.1)
• CVE-2026-34762 — Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber (CVSS 2.7)
• CVE-2026-34761 — Ella Core Panics Upon NGAP handover failure (CVSS 6.5)
• CVE-2026-33907 — Ella Core Panics during NAS Authentication Response/Failure with missing IEs (CVSS 6.5)
• CVE-2026-33906 — Ella Core has Privilege Escalation via Database Restore by NetworkManager role (CVSS 7.2)
• CVE-2026-33904 — Ella Core has a Denial of Service via SCTP connection cleanup deadlock (CVSS 6.5)
• CVE-2026-33903 — Ella Core panics when processing a crafted NGAP LocationReport message (CVSS 6.5)
• CVE-2026-33283 — Ella Core panics on malformed ULNASTransport Message without a Request Type (CVSS 7.5)
• CVE-2026-33282 — Ella Core panics on malformed NGAP Location Report (CVSS 7.5)
• CVE-2026-33281 — Ella Core panics on invalid PDU Session IDs in NGAP messages (CVSS 7.5)
• CVE-2026-32320 — Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings (CVSS 7.5)
• CVE-2026-32319 — Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload (CVSS 7.5)