PT-2026-28562 · Ella Core · Ella Core

CVE-2026-33903 · Publicado 2026-03-26 · Atualizado 2026-04-07

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.7.0

Description Ella Core, a 5G core designed for private networks, experiences a panic when processing a specifically crafted NGAP LocationReport message. An attacker capable of sending crafted NGAP messages to Ella Core can cause a process crash, leading to service disruption for all connected subscribers. The issue resides in the handling of NGAP Location Report messages.

Recommendations Update to version 1.7.0 or later, which includes guards in the NGAP Location Report handler.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2026-33903

GHSA-F2F3-9CX3-WCMF

GO-2026-4875

SUSE-SU-2026:1205-1

Produtos afetados

Ella Core

Referências · 47

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33903.json · Exploit
• https://github.com/ellanetworks/core · Nota
• https://github.com/ellanetworks/core/commit/ec77a2ad4508f8488cb356fd45b2f1efd92587f8 · Correção
• https://github.com/ellanetworks/core/security/advisories/GHSA-f2f3-9cx3-wcmf · Aviso do Fabricante
• https://github.com/ellanetworks/core/releases/tag/v1.7.0 · Nota
• https://suse.com/security/cve/CVE-2026-33748 · Nota
• https://suse.com/security/cve/CVE-2026-34042 · Nota
• https://suse.com/security/cve/CVE-2026-34388 · Nota
• https://suse.com/security/cve/CVE-2026-34386 · Nota
• https://suse.com/security/cve/CVE-2026-34385 · Nota
• https://twitter.com/CVEnew/status/2037719380898034090 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-33906 · Nota
• https://twitter.com/cyberbivash/status/2037641036776800291 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-34041 · Nota
• https://suse.com/security/cve/CVE-2026-33026 · Nota