Skip to content
OpenAdvisories

Package · Go

github.com/ellanetworks/core

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-44473

    Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse

    Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSetupResponse carrying any UE's AMF-UE-NGAP-ID. Ella Core does not verify the message arrived on the SCTP association boun…

    ellanetworks core github.com/ellanetworks/core Go
  • High 7.2
    CVE-2026-33906

    Ella Core has Privilege Escalation via Database Restore by NetworkManager role

    Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, the NetworkManager role was granted backup and restore permission. The restore endpoint accepted any valid SQLite file without verifying its contents. A NetworkManager could replace…

    ellanetworks core github.com/ellanetworks/core Go
  • High 7.5
    CVE-2026-33282

    Ella Core panics on malformed NGAP Location Report

    Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing a malformed NGAP LocationReport message with `ue-presence-in-area-of-interest` event type and omitting the optional `UEPresenceInAreaOfInterestList` IE. An att…

    ellanetworks core github.com/ellanetworks/core Go
  • High 7.5
    CVE-2026-32319

    Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

    Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the proce…

    ellanetworks core github.com/ellanetworks/core Go