CVE WatchJul 24, 2026

CVE-2026-34761

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure messa

CVSS

5.8

Medium

EPSS

0.3%

p24

KEV

—

Exploit Today

0-100

Published: Apr 2, 2026 · Last modified: Jul 24, 2026 · CWE-476

EPSS · 30d

0.3%EPSS · 30 days0.3%

2026-08-142026-09-11

Technical description

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connected subscribers. This issue has been patched in version 1.8.0.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-781307.5 HIG

23.5%

——7strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.1d CVE-2026-781265.9 MED

34.7%

——10strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.1d CVE-2026-457477.5 HIG

27.1%

——8Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic where some certificate fields were absent. Crafted TLS traffic processed by a deployment using affected Lua TLS scripting could crash Suricata, resulting in denial of service. Version 7.0.16 contains a fix. As a workaround, avoid Lua scripts that call TLS certificate information helpers on untrusted traffic (`TlsGetCertInfo` function), or update scripts to handle missing certificate fields where possible.2d CVE-2026-865476.2 MED

2.9%

——1mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.2d CVE-2026-663036.5 MED

54.2%

——16Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.4d CVE-2026-779018.8 HIG

46.5%

——14Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.4d