Processing Flaw in Ella Core 5G Core from Ella Networks

CVE-2026-33903

What is CVE-2026-33903?

Ella Core, a 5G core solution by Ella Networks, is susceptible to a processing flaw that can be exploited by attackers through specially crafted NGAP Location Report messages. This vulnerability may lead to process crashes, resulting in service disruptions for connected subscribers. The issue primarily affects versions prior to 1.7.0, which introduces necessary safeguards in the NGAP Location Report handler to prevent such attacks. It's crucial for users to update to version 1.7.0 or later to ensure system resilience.

References