Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-32320

24
FAUCET Score

CVE-2026-32320 identifies a denial-of-service vulnerability in Ella Core, a 5G core for private networks, affecting versions prior to 1.5.1. An unauthenticated attacker can exploit this by sending crafted NGAP messages containing specific zero-length security capability bitstrings, causing the Ella Core process to panic and disrupt service for all connected subscribers. This vulnerability carries a CVSSv3.1 score of 7.5 (HIGH) due to its network-based attack vector and complete availability impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed on CISA's Known Exploited Vulnerabilities catalog.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.5.1CPE matchmatch criteria
cpe:2.3:a:ellanetworks:ella_core:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.18%
Probability of exploitation in next 30 days
EPSS Percentile
8.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0019 is in the 0th percentile among its peer group of 51,553 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

gopatch availablevia ghsa
Product: github.com/ellanetworks/coreFixed in: 1.5.1

Vendor Advisories (1)

goGHSA-j478-p7vq-3347medium

Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings

Mar 12, 2026

References

github.com / ellanetworks/core/security/advisories/GHSA-j478-p7vq-3347
Vendor Advisory