Skip to content
Threat Feed

Product

Core (< 1.10.0)

1 brief RSS
high threat

Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse (CVE-2026-44473)

Ella Core is vulnerable to UE downlink redirection (CVE-2026-44473) due to missing SCTP association verification, enabling a malicious radio to forge a PDUSessionResourceSetupResponse and redirect downlink traffic.

core vulnerability 5G downlink redirection CVE-2026-44473
2r 1t