CVE-2026-33907

🗓️ 27 Mar 2026 20:58:06Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 14 Views

Ella Core panics on missing Information Elements in authentication messages; exploitable without authentication.

Reporter	Title	Published	Views	Family All 34
ATTACKERKB	CVE-2026-33907	27 Mar 202620:58	–	attackerkb
Circl	CVE-2026-33907	27 Mar 202622:22	–	circl
CNNVD	Ella Core 代码问题漏洞	27 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-33907 Ella Core Panics during NAS Authentication Response/Failure with missing IEs	27 Mar 202620:58	–	cvelist
Github Security Blog	Ella Core Panics during NAS Authentication Response/Failure with missing IEs	26 Mar 202622:15	–	github
NVD	CVE-2026-33907	27 Mar 202621:17	–	nvd
OSV	CVE-2026-33907 Ella Core Panics during NAS Authentication Response/Failure with missing IEs	27 Mar 202620:58	–	osv
OSV	GHSA-55Q8-2GWX-29PC Ella Core Panics during NAS Authentication Response/Failure with missing IEs	26 Mar 202622:15	–	osv
OSV	GO-2026-4872 Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core	2 Apr 202618:42	–	osv
OSV	SUSE-SU-2026:1205-1 Security update for govulncheck-vulndb	7 Apr 202614:18	–	osv

NVD

Vulners

Node

ellanetworks ella_coreRange<1.7.0

[
  {
    "vendor": "ellanetworks",
    "product": "core",
    "versions": [
      {
        "version": "< 1.7.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/ellanetworks/core/security/advisories/GHSA-55q8-2gwx-29pc
github	www.github.com/ellanetworks/core/releases/tag/v1.7.0
github	www.github.com/ellanetworks/core/commit/52962660e3bd3e23c7e96b0da270ac1e0e705273

17 Jun 2026 10:38Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.5

EPSS0.00236

SSVC

CWE-476