CVE-2026-33907

MediumCVSS 6.5/10Last modified Oct 26, 2026

Description

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.7.0 added IE presence verification to NAS message handling.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
ellanetworks	core	< 1.7.0

References

Timeline

Published: Mar 27, 2026
Last modified: Oct 26, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-339087.5ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44 CVE-2026-339095.9OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, several v CVE-2026-33915.5A security flaw has been discovered in FascinatedBox lily up to 2.3. Impacted is the function clear_storages of the file src/lily_emitter.c.CVE-2026-339108.8OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.CVE-2026-339115.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the POST CVE-2026-339125.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authen CVE-2026-339134.9OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authen CVE-2026-339147.2OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the PostC CVE-2026-339155.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, five insu CVE-2026-339164.7Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `resolvePartial()` in the Ha CVE-2026-339178.8OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a CVE-2026-339188.8OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the billi