Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 09:22:42 +0000 CVE-2026-34762 — Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber https://cve.radiocsirt.org/vuln/cve-2026-34762 <p><strong>Affected:</strong> ellanetworks core</p> <p>Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, the PUT /api/v1/subscriber/{imsi} API accepts an IMSI identifier from both the URL path and the JSON request body but never verifies they match. This allows an authenticated NetworkManager to modify any subscriber&#39;s policy while the audit trail records a fabricated or unrelated subscriber IMSI. This issue has been patched in version 1.8.0.</p> <p><strong>Affected:</strong> ellanetworks core</p> <p>Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, the PUT /api/v1/subscriber/{imsi} API accepts an IMSI identifier from both the URL path and the JSON request body but never verifies they match. This allows an authenticated NetworkManager to modify any subscriber&#39;s policy while the audit trail records a fabricated or unrelated subscriber IMSI. This issue has been patched in version 1.8.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-34762