Skip to content
OpenAdvisories

Package · Go

github.com/ellanetworks/core

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-44474

    Ella Core: Handover failures during concurrent Security Mode Command

    Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of security procedures defined in TS 33.501 §6.9.5.1 — it could send a NAS Security Mode Command while an N2 handover was stil…

    ellanetworks core github.com/ellanetworks/core Go
  • Low 2.7
    CVE-2026-34762

    Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber

    Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, the PUT /api/v1/subscriber/{imsi} API accepts an IMSI identifier from both the URL path and the JSON request body but never verifies they match. This allows an authenticated Network…

    ellanetworks core github.com/ellanetworks/core Go