CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

What is CVE-2026-34761?

CVE-2026-34761 is a medium-severity vulnerability in ellanetworks core, published on 2 Apr 2026. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connected subscribers. This issue has been patched in version 1.8.0.

Weakness: CWE-476

Which versions are affected by CVE-2026-34761?

3 open source packages ship an affected version, including github.com/ellanetworks/core. It affects 1 product.

Products include Ellanetworks Ella Core.

How do I fix CVE-2026-34761?

Upgrade github.com/ellanetworks/core to 1.8.0 or later.

Is CVE-2026-34761 being exploited?

There is no known exploitation of CVE-2026-34761 in the wild and no public exploit code.

Other vulnerabilities in ellanetworks core

• CVE-2026-33282 Ella Core panics on malformed NGAP Location Report High 7.5
• CVE-2026-32319 Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload High 7.5
• CVE-2026-33906 Ella Core has Privilege Escalation via Database Restore by NetworkManager role High 7.2
• CVE-2026-33903 Ella Core panics when processing a crafted NGAP LocationReport message Medium 6.5
• CVE-2026-33904 Ella Core has a Denial of Service via SCTP connection cleanup deadlock Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6gm8-3g4h-w82m, GO-2026-5177.