Eellanetworks

Products

Exploited and recent CVEs

• CVE-2026-44473 High 7.1 Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse 0.2%
• CVE-2026-44475 Medium 6.1 Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest 0.1%
• CVE-2026-44474 Low 3.7 Ella Core: Handover failures during concurrent Security Mode Command 0.1%
• CVE-2026-34762 Low 2.7 Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber 0.2%
• CVE-2026-34761 Medium 5.8 Ella Core Panics Upon NGAP handover failure 0.3%
• CVE-2026-33907 Medium 6.5 Ella Core Panics during NAS Authentication Response/Failure with missing IEs 0.2%
• CVE-2026-33906 High 7.2 Ella Core has Privilege Escalation via Database Restore by NetworkManager role 0.4%
• CVE-2026-33904 Medium 6.5 Ella Core has a Denial of Service via SCTP connection cleanup deadlock 0.2%
• CVE-2026-33903 Medium 6.5 Ella Core panics when processing a crafted NGAP LocationReport message 0.2%
• CVE-2026-33283 Medium 6.5 Ella Core panics on malformed ULNASTransport Message without a Request Type 0.4%
• CVE-2026-33282 High 7.5 Ella Core panics on malformed NGAP Location Report 0.4%
• CVE-2026-33281 Medium 6.5 Ella Core panics on invalid PDU Session IDs in NGAP messages 0.4%
• CVE-2026-32320 Medium 6.5 Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings 0.2%
• CVE-2026-32319 High 7.5 Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload 0.3%