Launch Week Day 1: Announcing Security Design Review
Start for Free
go

github.com/ellanetworks/core

View on go registry
23 Total advisories
23 Vulnerabilities
0 Malware

Vulnerabilities

HIGH 7.1
Go

CVE-2026-44473

Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse
MEDIUM 6.1
Go

CVE-2026-44475

Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest
LOW 3.7
Go

CVE-2026-44474

Ella Core has handover failures during concurrent Security Mode Command
MEDIUM 5.8
Go

CVE-2026-34761

Ella Core Panics Upon NGAP handover failure
LOW 2.7
Go

CVE-2026-34762

Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber
HIGH 7.2
Go

CVE-2026-33906

Ella Core has Privilege Escalation via Database Restore by NetworkManager role
MEDIUM 6.5
Go

CVE-2026-33907

Ella Core Panics during NAS Authentication Response/Failure with missing IEs
MEDIUM 6.5
Go

CVE-2026-33904

Ella Core has a Denial of Service via SCTP connection cleanup deadlock

UNKNOWN
Go

CVE-2026-33906

Ella Core has Privilege Escalation via Database Restore by NetworkManager role in github.com/ellanetworks/core
UNKNOWN
Go

CVE-2026-33904

Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core
UNKNOWN
Go

CVE-2026-33907

Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core
MEDIUM 6.5
Go

CVE-2026-33903

Ella Core panics when processing a crafted NGAP LocationReport message
UNKNOWN
Go

CVE-2026-33903

Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core
HIGH 7.5
Go

CVE-2026-33282

Ella Core panics on malformed NGAP Location Report
MEDIUM 6.5
Go

CVE-2026-33283

Ella Core panics on malformed ULNASTransport Message without a Request Type
MEDIUM 6.5
Go

CVE-2026-33281

Ella Core panics on invalid PDU Session IDs in NGAP messages
UNKNOWN
Go

CVE-2026-33283

Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core
UNKNOWN
Go

CVE-2026-33281

Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core
UNKNOWN
Go

CVE-2026-33282

Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core
HIGH 7.5
Go

CVE-2026-32319

Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload
MEDIUM 6.5
Go

CVE-2026-32320

Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings
UNKNOWN
Go

CVE-2026-32319

Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload in github.com/ellanetworks/core
UNKNOWN
Go

CVE-2026-32320

Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings in github.com/ellanetworks/core

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes