CVE-2026-33282
Ella Core is a 5G core designed for private networks.
Published Mar 24, 2026 · updated Jun 17, 2026 · ellanetworks ella core
Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing a malformed NGAP LocationReport message with event type and omitting the optional IE. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.6.0 added IE presence verification to NGAP message handling.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 24, 2026 · NIST NVD
Detected
Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing a malformed NGAP LocationReport message with event type and omitting the optional IE. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.6.0 added IE presence verificati
Jun 17, 2026 · NIST NVD
Updated
Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing a malformed NGAP LocationReport message with event type and omitting the optional IE. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.6.0 added IE presence verificati
Affected
- cpe ellanetworks/ella coreversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-33282
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-33282
Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing a malformed NGAP LocationReport message with event type and omitting the optional IE. An attacker able to send c
nvd.nist.gov