PT-2026-28564 · Ella Core · Ella Core

Published 2026-03-26 · Updated 2026-04-07 · CVE-2026-33906

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.7.0

Description Ella Core is a 5G core designed for private networks. The NetworkManager role had backup and restore permissions. The restore endpoint accepted any valid SQLite file without content verification. This allowed a NetworkManager to replace the production database with a modified copy, escalating privileges to Admin. This granted access to user management, audit logs, debug endpoints, and operator identity configuration, which the role was explicitly denied. The affected endpoint is /restore. The vulnerable parameter is the SQLite file provided to the /restore endpoint.

Recommendations Update to version 1.7.0 or later.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-33906

GHSA-87J9-M7X6-HVW2

GO-2026-4873

SUSE-SU-2026:1205-1

Affected Products

Ella Core

References · 48

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33906.json · Exploit
• https://github.com/ellanetworks/core/security/advisories/GHSA-87j9-m7x6-hvw2 · Vendor Advisory
• https://github.com/ellanetworks/core/commit/1e4768288a6519fcb63ec83f851584ecebb8a972 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-33906 · Security Note
• https://osv.dev/vulnerability/GHSA-87j9-m7x6-hvw2 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4873 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-33906 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1205-1 · Vendor Advisory
• https://github.com/ellanetworks/core · Note
• https://github.com/ellanetworks/core/releases/tag/v1.7.0 · Note
• https://suse.com/security/cve/CVE-2026-33748 · Note
• https://suse.com/security/cve/CVE-2026-34042 · Note
• https://suse.com/security/cve/CVE-2026-34388 · Note
• https://suse.com/security/cve/CVE-2026-34386 · Note
• https://suse.com/security/cve/CVE-2026-34385 · Note