CVE-2026-34761 MEDIUM

CVE-2026-34761: Ella Core Panics Upon NGAP handover failure

Vendor Ellanetworks
Product core
Weakness CWE-476
Published April 2, 2026
Last update April 3, 2026
View on NVD All CVEs

CVSS base score

5.8/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connected subscribers. This issue has been patched in version 1.8.0.

Key dates

02Disclosure timeline

April 2, 2026 CVE published
April 3, 2026 Record updated