CVE-2026-33283 in ellanetworks core
Résumé (Anglaise)
Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.6.0 adds a guard when receiving an UL NAS Message without a Request Type given no SM Context.
Responsable
GitHub_M
Réserver
18/03/2026
Divulgation
24/03/2026
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 352610 | ellanetworks core UL NAS Transport NAS Message déni de service | 476 | Non défini | Correctif officiel | CVE-2026-33283 |