CVE-2026-34761 — MEDIUM (5.8)

Q: How severe is CVE-2026-34761?

CVE-2026-34761 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-34761?

Check the references section above for vendor advisories and patch information. Affected products include: Ellanetworks Ella Core.

Vulnerability Description

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connected subscribers. This issue has been patched in version 1.8.0.

CVSS Score

5.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ellanetworks	Ella Core	< 1.8.0

Related Weaknesses (CWE)

CWE-476

References

https://github.com/ellanetworks/core/releases/tag/v1.8.0Release Notes
https://github.com/ellanetworks/core/security/advisories/GHSA-6gm8-3g4h-w82mVendor Advisory

FAQ

What is CVE-2026-34761?

CVE-2026-34761 is a vulnerability with a CVSS score of 5.8 (MEDIUM). Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover...

How severe is CVE-2026-34761?

CVE-2026-34761 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-34761?

Check the references section above for vendor advisories and patch information. Affected products include: Ellanetworks Ella Core.