Lucene search
K

7 matches found

NVD
NVD
added 2026/03/24 12:16 a.m.1 views

CVE-2026-33281

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing NGAP messages with invalid PDU Session IDs outside of 1-15. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected...

7.5CVSS0.00022EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/23 11:46 p.m.1 views

CVE-2026-33281

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing NGAP messages with invalid PDU Session IDs outside of 1-15. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected...

6.5CVSS5.8AI score0.00022EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/03/23 11:46 p.m.3 views

CVE-2026-33281

CVE-2026-33281 affects Ella Core, a private-network 5G core. The issue occurs when processing NGAP messages with invalid PDU Session IDs outside 1-15, causing the process to panic and potentially disrupt service for all connected subscribers. No authentication is required. This affects versions p...

7.5CVSS5.8AI score0.00022EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/03/23 11:46 p.m.27 views

CVE-2026-33281 Ella Core panics on invalid PDU Session IDs in NGAP messages

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing NGAP messages with invalid PDU Session IDs outside of 1-15. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected...

6.5CVSS0.00022EPSS
Exploits0References1
OSV
OSV
added 2026/03/23 6:16 p.m.1 views

GO-2026-4783 Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core

Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core...

7.5CVSS5.8AI score0.00022EPSS
Exploits0References1
Snyk
Snyk
added 2026/03/23 6:16 p.m.2 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the NGAP message handling process. An attacker can cause the application to panic and potentially crash by sending specially crafted messages with invalid PDU Session IDs. Remediation Upgrade...

7.5CVSS6.4AI score0.00022EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:43 p.m.68 views

Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager Virtual Appliance available

Summary There are multiple security vulnerabilities in various components used by IBM Security Identity Manager Virtual Appliance Vulnerability Details CVEID: CVE-2016-0330 DESCRIPTION: IBM Security Identity Manager Virtual Appliance uses a weak password algorithm which allows users to create...

10CVSS1.7AI score0.79963EPSS
Exploits7Affected Software1
Rows per page
Query Builder