What is GHSA-55q8-2gwx-29pc?

GHSA-55q8-2gwx-29pc is a security advisory published by GitHub Security Advisories with Medium severity. Ella Core Panics during NAS Authentication Response/Failure with missing IEs

Which CVE IDs does GHSA-55q8-2gwx-29pc cover?

GHSA-55q8-2gwx-29pc covers the following CVE IDs: CVE-2026-33907. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-55q8-2gwx-29pc?

GHSA-55q8-2gwx-29pc has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-55q8-2gwx-29pc?

GHSA-55q8-2gwx-29pc affects 1 product, including: go/github.com/ellanetworks/core:\u003c 1.7.0.

GHSA-55q8-2gwx-29pcMediumCVSS 6.5

Ella Core Panics during NAS Authentication Response/Failure with missing IEs

Vendor

GitHub Security Advisories

Published

March 26, 2026

Last Modified

March 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-33907 →

📋 Description

Summary

Ella Core panics when processing Authentication Response and Authentication Failure NAS message missing IEs.

Impact

An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required.

Fix

Added IE presence verification to NAS message handling.

🎯 Affected products1

go/github.com/ellanetworks/core:< 1.7.0

🔗 References (5)

https://github.com/ellanetworks/core/security/advisories/GHSA-55q8-2gwx-29pc
https://github.com/ellanetworks/core/commit/52962660e3bd3e23c7e96b0da270ac1e0e705273
https://github.com/ellanetworks/core/releases/tag/v1.7.0
https://nvd.nist.gov/vuln/detail/CVE-2026-33907
https://github.com/advisories/GHSA-55q8-2gwx-29pc