Our takeCISA reports active exploitation in Baicells Nova 430H eNodeB <= BaiBLQ_3.0.12 (CVE-2026-96274). Successful attack lets an adversary inject malformed messages leading to denial of service. Patch or mitigate immediately if you run these devices.Cyber Resilience desk
Sources (1)
- cisa_ics · cisa_ics
What this means for you — Security leader:CISA reports active exploitation of a malformed message injection flaw in Baicells Nova 430H eNodeB (pBS3101SH) <= BaiBLQ_3.0.12 that can lead to denial-of-service. If you operate this 4G/5G small-cell equipment, treat this as an emergency patch and update immediately.
What this means for you — Lean IT orgs:If you run a Baicells Nova 430H eNodeB for your wireless network, this CISA advisory means an attacker can knock it offline. Update to a fixed version as soon as you can or ask your provider to do it.
What this means for you — MSP:Baicells Nova 430H (pBS3101SH) <= BaiBLQ_3.0.12 has a confirmed exploitable DoS via malformed messages per CISA. Check every client site running this model and schedule an immediate firmware update.
What this means for you — Researcher:CISA confirms active exploitation of CVE-2026-96274 in Baicells Nova 430H eNodeB <= BaiBLQ_3.0.12; successful attack injects malformed messages leading to denial-of-service.