CVE-2026-96274

Name of the Vulnerable Software and Affected Versions Baicells Nova 430H versions prior to 3.0.13

Description An unauthenticated device within radio range can send a malformed uplink message during connection setup containing an invalid NAS (Non-Access Stratum) payload. The eNodeB fails to properly validate this payload and forwards the message to the core network, triggering a shutdown of the signaling association for the cell. This process leads to a temporary service disruption until connectivity between the eNodeB and the core network is re-established.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.