CVE-2026-33904

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to hang until the process is restarted. An attacker with access to the N2 interface can cause Ella Core to hang, resulting in a denial of service for all subscribers. Version 1.7.0 adds deferred Radio cleanup in serveConn SCTP server so that every connection exit path removes the radio. Remove the stale-entry scan from SCTP Notification handling.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Mar 27, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-339057.1ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44CVE-2026-339067.2Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, the NetworkManager role was granted backup and restore permissCVE-2026-339076.5Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and AuthenticatiCVE-2026-339087.5ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44CVE-2026-339095.9OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, several vCVE-2026-33915.5A security flaw has been discovered in FascinatedBox lily up to 2.3. Impacted is the function clear_storages of the file src/lily_emitter.c.CVE-2026-339108.8OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.CVE-2026-339115.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the POST CVE-2026-339125.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authenCVE-2026-339134.9OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authenCVE-2026-339147.2OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the PostCCVE-2026-339155.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, five insu
CVE-2026-33904: Medium severity, CVSS 6.5 | Vulnix