← Back to Feed

Baicells Nova 430H

CVE-2026-96274

September 29, 2026 · CISA (US-CERT) · Severity: CRITICAL

This advisory describes a denial-of-service vulnerability (CVE-2026-96274) in the Baicells Nova 430H eNodeB where a malformed uplink message can cause a signaling shutdown. The attack is unauthenticated and requires only radio range proximity. No patch is available from the vendor. 📌 **Analyst Note:** Although the CVSS is 7.4, the potential for targeted attacks on cellular infrastructure makes this a serious concern. Organizations should monitor for unusual cell shutdowns and consider radio-level mitigations if possible, while advocating for a vendor fix.

Key Takeaways

  • An unauthenticated attacker within radio range can send a malformed NAS payload to the Baicells Nova 430H eNodeB, triggering a shutdown of the cell's signaling association.
  • This vulnerability results in a temporary denial of service as the eNodeB and core network must re-establish connectivity, disrupting communications for all users in that cell.
  • The affected equipment is used in communications and IT critical infrastructure worldwide, and Baicells has not provided a fix for the vulnerability.
☕ Buy a Coffee