CVE-2026-32319

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. This vulnerability is fixed in 1.5.1.

• CWE-125

• https://github.com/ellanetworks/core/security/advisories/GHSA-m9pm-w3gv-c68fVendor Advisory

Published

Mar 13, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32313xmlseclibs is a library written in PHP for working with XML …8.2
• CVE-2026-32314Yamux is a stream multiplexer over reliable, ordered connect…7.5
• CVE-2026-32315motionEye (mEye) is an online interface for motion software,…5.5
• CVE-2026-32316jq is a command-line JSON processor. An integer overflow vul…7.5
• CVE-2026-32317Cryptomator for Android offers multi-platform transparent cl…5.9
• CVE-2026-32318Cryptomator for IOS offers multi-platform transparent client…5.9
• CVE-2026-32320Ella Core is a 5G core designed for private networks. Prior …7.5
• CVE-2026-32321ClipBucket v5 is an open source video sharing platform. An a…8.8
• CVE-2026-32322soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22…5.3
• CVE-2026-32323Mullvad VPN is a VPN client app for desktop and mobile. When…7.8
• CVE-2026-32324Anviz CX7 Firmware is  vulnerable because the application em…7.7
• CVE-2026-32325Privilege chaining issue exists in ServerView Agents for Win…8.5