# github.com/ellanetworks/core (Go) vulnerabilities Source: https://junglewise.ai/threats/technologies/github-com-ellanetworks-core Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/github-com-ellanetworks-core.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 14 vulnerabilities in github.com/ellanetworks/core (Go): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-44475, was published on 27 May 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 14 (0 critical, 0 exploited in the wild) ## About github.com/ellanetworks/core (Go) A Go-based core library for Ella Networks infrastructure. ## Latest github.com/ellanetworks/core (Go) vulnerabilities - [CVE-2026-44475: Ella Networks Ella Core security bypass in NGAP PathSwitchRequest](https://junglewise.ai/threats/cve-2026-44475-ella-networks-ella-core-security-bypass-in-ngap-pathswitchrequest) (medium, CVSS 6.1, published 27 May 2026) - [CVE-2026-44474: Ella Networks Ella Core improper security check in 5G NAS procedures](https://junglewise.ai/threats/cve-2026-44474-ella-networks-ella-core-improper-security-check-in-5g-nas) (low, CVSS 3.7, published 27 May 2026) - [CVE-2026-44473: Ella Networks Ella Core traffic redirection in NGAP handling](https://junglewise.ai/threats/cve-2026-44473-ella-networks-ella-core-traffic-redirection-in-ngap-handling) (high, CVSS 7.1, published 27 May 2026) - [CVE-2026-34762: Ella Networks Ella Core audit log falsification in subscriber API](https://junglewise.ai/threats/cve-2026-34762-ella-networks-ella-core-audit-log-falsification-in-subscriber-api) (low, CVSS 3.1, published 2 Apr 2026) - [CVE-2026-34761: Ella Networks Ella Core NULL pointer dereference in NGAP handover](https://junglewise.ai/threats/cve-2026-34761-ella-networks-ella-core-null-pointer-dereference-in-ngap-handover) (medium, CVSS 5.8, published 2 Apr 2026) - [CVE-2026-33907: GO-2026-4872 - Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33907-ella-core-panics-during-nas-authentication-response-failure-with) (medium, CVSS 6.5, published 27 Mar 2026) - [CVE-2026-33906: GO-2026-4873 - Ella Core has Privilege Escalation via Database Restore by NetworkManager role in…](https://junglewise.ai/threats/cve-2026-33906-ella-core-has-privilege-escalation-via-database-restore-by) (high, CVSS 7.2, published 27 Mar 2026) - [CVE-2026-33904: GO-2026-4874 - Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33904-ella-core-has-a-denial-of-service-via-sctp-connection-cleanup) (medium, CVSS 6.5, published 27 Mar 2026) - [CVE-2026-33903: GO-2026-4875 - Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33903-ella-core-panics-when-processing-a-crafted-ngap-locationreport) (medium, CVSS 6.5, published 27 Mar 2026) - [CVE-2026-33282: GO-2026-4780 - Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33282-ella-core-panics-on-malformed-ngap-location-report) (low, CVSS 3.1, published 23 Mar 2026) - [CVE-2026-33281: GO-2026-4783 - Ella Core panics on invalid PDU Session IDs in NGAP messages in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33281-ella-core-panics-on-invalid-pdu-session-ids-in-ngap-messages) (low, CVSS 3.1, published 23 Mar 2026) - [CVE-2026-33283: GO-2026-4776 - Ella Core panics on malformed ULNASTransport Message without a Request Type in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33283-ella-core-panics-on-malformed-ulnastransport-message-without-a) (low, CVSS 3.1, published 23 Mar 2026) - [CVE-2026-32320: Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings](https://junglewise.ai/threats/cve-2026-32320-ella-core-amf-dos-via-malformed-pathswitchrequest-with-empty-nr) (low, CVSS 3.1, published 13 Mar 2026) - [CVE-2026-32319: Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS…](https://junglewise.ai/threats/cve-2026-32319-ella-core-vulnerable-to-unauthenticated-amf-dos-via-malformed) (low, CVSS 3.1, published 13 Mar 2026) ## Most severe github.com/ellanetworks/core (Go) vulnerabilities - [CVE-2026-33906: GO-2026-4873 - Ella Core has Privilege Escalation via Database Restore by NetworkManager role in…](https://junglewise.ai/threats/cve-2026-33906-ella-core-has-privilege-escalation-via-database-restore-by) (high, CVSS 7.2, published 27 Mar 2026) - [CVE-2026-44473: Ella Networks Ella Core traffic redirection in NGAP handling](https://junglewise.ai/threats/cve-2026-44473-ella-networks-ella-core-traffic-redirection-in-ngap-handling) (high, CVSS 7.1, published 27 May 2026) - [CVE-2026-33907: GO-2026-4872 - Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33907-ella-core-panics-during-nas-authentication-response-failure-with) (medium, CVSS 6.5, published 27 Mar 2026) - [CVE-2026-33903: GO-2026-4875 - Ella Core panics when processing a crafted NGAP LocationReport message in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33903-ella-core-panics-when-processing-a-crafted-ngap-locationreport) (medium, CVSS 6.5, published 27 Mar 2026) - [CVE-2026-33904: GO-2026-4874 - Ella Core has a Denial of Service via SCTP connection cleanup deadlock in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33904-ella-core-has-a-denial-of-service-via-sctp-connection-cleanup) (medium, CVSS 6.5, published 27 Mar 2026) - [CVE-2026-44475: Ella Networks Ella Core security bypass in NGAP PathSwitchRequest](https://junglewise.ai/threats/cve-2026-44475-ella-networks-ella-core-security-bypass-in-ngap-pathswitchrequest) (medium, CVSS 6.1, published 27 May 2026) - [CVE-2026-34761: Ella Networks Ella Core NULL pointer dereference in NGAP handover](https://junglewise.ai/threats/cve-2026-34761-ella-networks-ella-core-null-pointer-dereference-in-ngap-handover) (medium, CVSS 5.8, published 2 Apr 2026) - [CVE-2026-44474: Ella Networks Ella Core improper security check in 5G NAS procedures](https://junglewise.ai/threats/cve-2026-44474-ella-networks-ella-core-improper-security-check-in-5g-nas) (low, CVSS 3.7, published 27 May 2026) - [CVE-2026-33282: GO-2026-4780 - Ella Core panics on malformed NGAP Location Report in github.com/ellanetworks/core](https://junglewise.ai/threats/cve-2026-33282-ella-core-panics-on-malformed-ngap-location-report) (low, CVSS 3.1, published 23 Mar 2026) - [CVE-2026-32319: Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS…](https://junglewise.ai/threats/cve-2026-32319-ella-core-vulnerable-to-unauthenticated-amf-dos-via-malformed) (low, CVSS 3.1, published 13 Mar 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Go technologies - [github.com/mattermost/mattermost-server (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server): 297 vulnerabilities - [github.com/mattermost/mattermost-server/v6 (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v6): 222 vulnerabilities - [github.com/mattermost/mattermost/server/v8 (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v8): 207 vulnerabilities - [github.com/mattermost/mattermost-server/v5 (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v5): 199 vulnerabilities - [stdlib (Go)](https://junglewise.ai/threats/technologies/go-stdlib): 178 vulnerabilities - [github.com/siyuan-note/siyuan/kernel (Go)](https://junglewise.ai/threats/technologies/github-com-siyuan-note-siyuan-kernel): 160 vulnerabilities - [code.gitea.io/gitea (Go)](https://junglewise.ai/threats/technologies/code-gitea-io-gitea): 126 vulnerabilities - [code.vikunja.io/api (Go)](https://junglewise.ai/threats/technologies/code-vikunja-io-api): 91 vulnerabilities - [gogs.io/gogs (Go)](https://junglewise.ai/threats/technologies/gogs-io-gogs): 81 vulnerabilities - [github.com/traefik/traefik/v2 (Go)](https://junglewise.ai/threats/technologies/github-com-traefik-traefik-v2): 78 vulnerabilities - [github.com/traefik/traefik (Go)](https://junglewise.ai/threats/technologies/github-com-traefik-traefik): 75 vulnerabilities - [github.com/usememos/memos (Go)](https://junglewise.ai/threats/technologies/github-com-usememos-memos): 75 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "github.com/ellanetworks/core (Go) vulnerabilities", https://junglewise.ai/threats/technologies/github-com-ellanetworks-core, 13 November 2026.