PT-2026-26468 · Ella Core · Ella Core

P1-Aji · Published 2026-03-19 · Updated 2026-03-27 · CVE-2026-33282

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.6.0

Description Ella Core, a 5G core designed for private networks, experiences a panic when processing a malformed NGAP LocationReport message. Specifically, the issue occurs with the ue-presence-in-area-of-interest event type when the optional UEPresenceInAreaOfInterestList IE is omitted. An attacker can exploit this by sending crafted NGAP messages to Ella Core, leading to a process crash and service disruption for all connected subscribers. No authentication is required for exploitation. The issue is related to the handling of NGAP messages and the absence of proper IE presence verification.

Recommendations Update to version 1.6.0 or later.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-33282

GHSA-826Q-WRQ4-P23X

GO-2026-4780

SUSE-SU-2026:1135-1

Affected Products

Ella Core

References · 148

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33282.json · Exploit
• https://github.com/ellanetworks/core/security/advisories/GHSA-826q-wrq4-p23x · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33282 · Security Note
• https://osv.dev/vulnerability/CVE-2026-33282 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4780 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1135-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-826q-wrq4-p23x · Vendor Advisory
• https://github.com/ellanetworks/core · Note
• https://suse.com/security/cve/CVE-2026-33132 · Note
• https://suse.com/security/cve/CVE-2026-33247 · Note
• https://suse.com/security/cve/CVE-2026-30886 · Note
• https://suse.com/security/cve/CVE-2026-33638 · Note
• https://suse.com/security/cve/CVE-2026-32769 · Note
• https://suse.com/security/cve/CVE-2026-32305 · Note
• https://suse.com/security/cve/CVE-2026-24692 · Note