Security Advisory

CVE-2026-44473

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-27 15:16:05

Last updated 2026-05-28 14:33:35

Assigner GitHub_M

CVSS score 7.1

State PUBLISHED

Description

Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSetupResponse carrying any UE's AMF-UE-NGAP-ID. Ella Core does not verify the message arrived on the SCTP association bound to that UE's logical NG-connection, then creates a GTP tunnel towards that radio. This vulnerability is fixed in 1.10.0.

← Browse all CVEs View on cve.org ↗