1 matches found
CVE-2026-34762: Improper Input Validation
Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, the PUT /api/v1/subscriber/imsi API accepts an IMSI identifier from both the URL path and the JSON request body but never verifies they match. This allows an authenticated NetworkManager to modify any subscriber's polic...
2.7CVSS5.7AI score0.00308EPSS
SaveExploits0References3
20