MEDIUM6.5Go
GHSA-3366-gw57-fcm5· CVE-2026-33283, GO-2026-4776Ella Core panics on malformed ULNASTransport Message without a Request Type
Modified: 3/25/2026
package
Go/github.com/ellanetworks/core
pkg:go/github.com/ellanetworks/core
MEDIUM6.5Go
GHSA-55q8-2gwx-29pc· CVE-2026-33907, GO-2026-4872Ella Core Panics during NAS Authentication Response/Failure with missing IEs
Modified: 4/2/2026
MEDIUM5.8Go
GHSA-6gm8-3g4h-w82m· CVE-2026-34761, GO-2026-5177Ella Core Panics Upon NGAP handover failure
Modified: 6/25/2026
HIGH7.5Go
GHSA-826q-wrq4-p23x· CVE-2026-33282, GO-2026-4780Ella Core panics on malformed NGAP Location Report
Modified: 3/25/2026
HIGH7.2Go
GHSA-87j9-m7x6-hvw2· CVE-2026-33906, GO-2026-4873Ella Core has Privilege Escalation via Database Restore by NetworkManager role
Modified: 4/2/2026
MEDIUM6.5Go
GHSA-9h59-p45g-445h· CVE-2026-33904, GO-2026-4874Ella Core has a Denial of Service via SCTP connection cleanup deadlock
Modified: 4/2/2026
MEDIUM6.5Go
GHSA-f2f3-9cx3-wcmf· CVE-2026-33903, GO-2026-4875Ella Core panics when processing a crafted NGAP LocationReport message
Modified: 4/2/2026
MEDIUM6.5Go
GHSA-j478-p7vq-3347· CVE-2026-32320, GO-2026-4691Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings
Modified: 3/23/2026
HIGH7.5Go
GHSA-m9pm-w3gv-c68f· CVE-2026-32319, GO-2026-4692Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload
Modified: 3/23/2026
LOW3.7Go
GHSA-mc29-hmx6-856q· CVE-2026-44474, GO-2026-5502Ella Core has handover failures during concurrent Security Mode Command
Modified: 6/25/2026
MEDIUM6.1Go
GHSA-pwfh-mqp3-pqwj· CVE-2026-44475, GO-2026-5554Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest
Modified: 6/25/2026
MEDIUM6.5Go
GHSA-q669-4gmv-g8mf· CVE-2026-33281, GO-2026-4783Ella Core panics on invalid PDU Session IDs in NGAP messages
Modified: 3/25/2026
HIGH7.1Go
GHSA-qfxw-v8qx-vj3v· CVE-2026-44473, GO-2026-5581Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse
Modified: 6/25/2026
LOW2.7Go
GHSA-xw45-cc32-442f· CVE-2026-34762, GO-2026-5770Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber
Modified: 6/25/2026
—Go
GO-2026-4691· CVE-2026-32320, GHSA-j478-p7vq-3347Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core
Modified: 3/23/2026
—Go
GO-2026-4692· CVE-2026-32319, GHSA-m9pm-w3gv-c68fElla Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core
Modified: 3/23/2026
—Go
GO-2026-4776· CVE-2026-33283, GHSA-3366-gw57-fcm5Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core
Modified: 3/23/2026
—Go
GO-2026-4780· CVE-2026-33282, GHSA-826q-wrq4-p23xElla Core panics on malformed NGAP Location Report in github.com/ellanetworks/core
Modified: 3/23/2026
—Go
GO-2026-4783· CVE-2026-33281, GHSA-q669-4gmv-g8mfElla Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core
Modified: 3/23/2026
—Go
GO-2026-4872· CVE-2026-33907, GHSA-55q8-2gwx-29pcElla Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core
Modified: 4/2/2026
—Go
GO-2026-4873· CVE-2026-33906, GHSA-87j9-m7x6-hvw2Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core
Modified: 4/2/2026
—Go
GO-2026-4874· CVE-2026-33904, GHSA-9h59-p45g-445hElla Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core
Modified: 4/2/2026
—Go
GO-2026-4875· CVE-2026-33903, GHSA-f2f3-9cx3-wcmfElla Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core
Modified: 4/2/2026
—Go
GO-2026-5177· CVE-2026-34761, GHSA-6gm8-3g4h-w82mElla Core Panics Upon NGAP handover failure in github.com/ellanetworks/core
Modified: 6/25/2026
—Go
GO-2026-5502· CVE-2026-44474, GHSA-mc29-hmx6-856qElla Core has handover failures during concurrent Security Mode Command in github.com/ellanetworks/core
Modified: 6/25/2026
—Go
GO-2026-5554· CVE-2026-44475, GHSA-pwfh-mqp3-pqwjElla Core has a UE Security Capability bypass on NGAP PathSwitchRequest in github.com/ellanetworks/core
Modified: 6/25/2026
—Go
GO-2026-5581· CVE-2026-44473, GHSA-qfxw-v8qx-vj3vElla Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse in github.com/ellanetworks/core
Modified: 6/25/2026
—Go
GO-2026-5770· CVE-2026-34762, GHSA-xw45-cc32-442fElla Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core
Modified: 6/25/2026