ByteOS Network

NVD Vulnerability Details :

CVE-2026-33281

Analyzed

Source-security-advisories@github.com

Published At-24 Mar, 2026 | 00:16

Updated At-24 Mar, 2026 | 19:36

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing NGAP messages with invalid PDU Session IDs outside of 1-15. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Version 1.6.0 added PDU Session ID validations during NGAP message handling.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

ellanetworks>>ella_core>>Versions before 1.6.0(exclusive)

cpe:2.3:a:ellanetworks:ella_core:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-129	Primary	security-advisories@github.com

CWE ID: CWE-129

Type: Primary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/ellanetworks/core/security/advisories/GHSA-q669-4gmv-g8mf	security-advisories@github.com	Vendor Advisory

Hyperlink: https://github.com/ellanetworks/core/security/advisories/GHSA-q669-4gmv-g8mf

Source: security-advisories@github.com

Resource:

Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History