Ella Core is a 5G core designed for private networks.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 27, 2026 · NIST NVD

   Detected

   Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.7.0 added IE presence verification to NAS m

2. Jun 17, 2026 · NIST NVD

   Updated

   Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.7.0 added IE presence verification to NAS m

Affected

• cpe ellanetworks/ella coreversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-33907

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33907

  Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disrup

  nvd.nist.gov

References

• Patch · github.com
• Release Notes · github.com
• Vendor Advisory · github.com