PT-2026-28563 · Ella Core · Ella Core

Published 2026-03-26 · Updated 2026-04-07 · CVE-2026-33904

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.7.0

Description A deadlock in the AMF's SCTP notification handler can cause the entire AMF control plane to hang until the process is restarted. An attacker with access to the N2 interface can cause Ella Core to hang, resulting in a denial of service for all subscribers. The issue relates to the handling of SCTP notifications and the presence of stale entries.

Recommendations Update to version 1.7.0 or later. This version adds deferred Radio cleanup in the serveConn SCTP server, ensuring every connection exit path removes the radio, and removes the stale-entry scan from SCTP Notification handling.

Exploit

Fix

Weakness Enumeration

CWE-833

Related Identifiers

CVE-2026-33904

GHSA-9H59-P45G-445H

GO-2026-4874

SUSE-SU-2026:1205-1

Affected Products

Ella Core

References · 46

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33904.json · Exploit
• https://github.com/ellanetworks/core/security/advisories/GHSA-9h59-p45g-445h · Vendor Advisory
• https://github.com/ellanetworks/core/commit/999f606c5cae261471d9e3f063d7ecd1bd754076 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-33904 · Security Note
• https://osv.dev/vulnerability/CVE-2026-33904 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9h59-p45g-445h · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4874 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1205-1 · Vendor Advisory
• https://github.com/ellanetworks/core · Note
• https://github.com/ellanetworks/core/releases/tag/v1.7.0 · Note
• https://suse.com/security/cve/CVE-2026-33748 · Note
• https://suse.com/security/cve/CVE-2026-34042 · Note
• https://suse.com/security/cve/CVE-2026-34388 · Note
• https://suse.com/security/cve/CVE-2026-34386 · Note
• https://suse.com/security/cve/CVE-2026-34385 · Note