Our takeCISA reports active exploitation of CVE-2026-96274 in Baicells Nova 430H eNodeB (pBS3101SH) <= BaiBLQ_3.0.12, allowing malformed messages that trigger denial-of-service. Patch immediately if you run this gear.Cyber Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:CISA reports active exploitation of CVE-2026-96274 in Baicells Nova 430H eNodeB (pBS3101SH) <= BaiBLQ_3.0.12. Update to a fixed version immediately if you operate this model in production cellular infrastructure.
What this means for you — Lean IT orgs:If you run a Baicells Nova 430H base station, update its firmware right away. This vulnerability lets an attacker knock it offline with bad messages; check with your provider or installer today.
What this means for you — MSP:Scan client environments for any Baicells Nova 430H (pBS3101SH) running firmware <= BaiBLQ_3.0.12 and prioritize patching; CISA states it is under active exploitation.
What this means for you — Researcher:CISA advisory ICSA-26-272-04 details CVE-2026-96274 (CVSS 7.4) in Baicells Nova 430H <= BaiBLQ_3.0.12; successful exploitation leads to denial-of-service via malformed messages.