https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-33907.htmlhttps://patchthecve.com/cve/CVE-2026-33907.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 6.5: Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connecthttps://patchthecve.com/cve/CVE-2026-33906.htmlhttps://patchthecve.com/cve/CVE-2026-33906.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.2: Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, the NetworkManager role was granted backup and restore permission. The restore endpoint accepted any valid SQLite file without verifying its contents. A NetworkManager could replace the production database with a tampered https://patchthecve.com/cve/CVE-2026-33904.htmlhttps://patchthecve.com/cve/CVE-2026-33904.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 6.5: Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to hang until the process is restarted. An attacker with access to the N2 interface can cause Ella Core to hang, resulting in a denial ohttps://patchthecve.com/cve/CVE-2026-33903.htmlhttps://patchthecve.com/cve/CVE-2026-33903.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.5: Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. Version 1.