CVE-2026-34761

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connected subscribers. This issue has been patched in version 1.8.0.

CVSS v3 5.8 MEDIUM

5.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.3 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/ellanetworks/core/releases/tag/v1.8.0	Release Notes
https://github.com/ellanetworks/core/security/advisories/GHSA-6gm8-3g4h-w82m	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ellanetworks:ella_core:*:*:*:*:*:*:*:*

History

24 Jul 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Ella Core es un núcleo 5G diseñado para redes privadas. Antes de la versión 1.8.0, Ella Core entra en pánico al procesar un mensaje de fallo de traspaso NGAP. Un atacante capaz de hacer que un gNodeB envíe mensajes de fallo de traspaso NGAP a Ella Core puede bloquear el proceso, causando interrupción del servicio para todos los suscriptores conectados. Este problema ha sido parcheado en la versión 1.8.0.

07 Apr 2026, 16:51

Type	Values Removed	Values Added
References	~~() https://github.com/ellanetworks/core/releases/tag/v1.8.0 -~~	() https://github.com/ellanetworks/core/releases/tag/v1.8.0 - Release Notes
References	~~() https://github.com/ellanetworks/core/security/advisories/GHSA-6gm8-3g4h-w82m -~~	() https://github.com/ellanetworks/core/security/advisories/GHSA-6gm8-3g4h-w82m - Vendor Advisory
CPE		cpe:2.3:a:ellanetworks:ella_core::::::::
First Time		Ellanetworks Ellanetworks ella Core

02 Apr 2026, 20:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-04-02 20:16

Updated : 2026-07-24 21:10

NVD link : CVE-2026-34761

Mitre link : CVE-2026-34761

CVE.ORG link : CVE-2026-34761

JSON object : View

Products Affected

ellanetworks

ella_core

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2026-34761", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34761", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-03T15:42:35.859554Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 1.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "ellanetworks", "product": "core", "versions": [{"status": "affected", "version": "< 1.8.0"}]}]}], "published": "2026-04-02T20:16:25.747", "references": [{"url": "https://github.com/ellanetworks/core/releases/tag/v1.8.0", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/ellanetworks/core/security/advisories/GHSA-6gm8-3g4h-w82m", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connected subscribers. This issue has been patched in version 1.8.0."}, {"lang": "es", "value": "Ella Core es un n\u00facleo 5G dise\u00f1ado para redes privadas. Antes de la versi\u00f3n 1.8.0, Ella Core entra en p\u00e1nico al procesar un mensaje de fallo de traspaso NGAP. Un atacante capaz de hacer que un gNodeB env\u00ede mensajes de fallo de traspaso NGAP a Ella Core puede bloquear el proceso, causando interrupci\u00f3n del servicio para todos los suscriptores conectados. Este problema ha sido parcheado en la versi\u00f3n 1.8.0."}], "lastModified": "2026-07-24T21:10:00.143", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ellanetworks:ella_core:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F79EF764-4DAE-481E-9B49-974F342B1860", "versionEndExcluding": "1.8.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}