CVE-2026-44473

Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSetupResponse carrying any UE's AMF-UE-NGAP-ID. Ella Core does not verify the message arrived on the SCTP association bound to that UE's logical NG-connection, then creates a GTP tunnel towards that radio. This vulnerability is fixed in 1.10.0.

• CWE-358
• CWE-863

• https://github.com/ellanetworks/core/security/advisories/GHSA-qfxw-v8qx-vj3v

Published

May 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44467The Claude Desktop app gives you Claude Code with a graphica…6.8
• CVE-2026-44468The affected product creates a directory with insecure defau…8.5
• CVE-2026-44469The affected product extracts installation files to a tempor…7
• CVE-2026-4447Inappropriate implementation in V8 in Google Chrome prior to…8.8
• CVE-2026-44470The Claude Desktop app gives you Claude Code with a graphica…7.8
• CVE-2026-44471gitoxide is an implementation of git written in Rust. Prior …7.8
• CVE-2026-44474Ella Core is a 5G core designed for private networks. Prior …3.7
• CVE-2026-44475Ella Core is a 5G core designed for private networks. Prior …6.1
• CVE-2026-44477CloudNativePG is a platform designed to manage PostgreSQL da…9.9
• CVE-2026-44478hoppscotch is an open source API development ecosystem. The …7.5
• CVE-2026-44479Vercel’s AI Cloud is a unified platform for building modern …5.5
• CVE-2026-4448Heap buffer overflow in ANGLE in Google Chrome prior to 146.…8.8