ellanetworks core up to 1.9.x security check

Summaryinfo

A vulnerability classified as critical has been found in ellanetworks core up to 1.9.x. The affected element is an unknown function. The manipulation leads to security check. This vulnerability is traded as CVE-2026-44473. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in ellanetworks core up to 1.9.x and classified as critical. This issue affects some unknown processing. The manipulation with an unknown input leads to a security check vulnerability. Using CWE to declare the problem leads to CWE-358. The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSetupResponse carrying any UE's AMF-UE-NGAP-ID. Ella Core does not verify the message arrived on the SCTP association bound to that UE's logical NG-connection, then creates a GTP tunnel towards that radio. This vulnerability is fixed in 1.10.0.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-44473 since 05/06/2026. The exploitation is known to be easy. Access to the local network is required for this attack to succeed. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1211 for this issue.

Upgrading to version 1.10.0 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• ellanetworks

Name

• core

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9

Website

• Product: https://github.com/ellanetworks/core/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion