CVE-2025-15417Low· 3.3▾ SunlitA vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of servi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is publicly available and might be used. The name of the patch is 465273d13ba5d47b274c38c9d1b07f04859178a1. A patch should be applied to remediate this issue.
open5gs <= 2.7.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-15418Low· 3.3A security flaw has been discovered in Open5GS up to 2.7.6
CVE-2025-15419Low· 3.3A weakness has been identified in Open5GS up to 2.7.6
CVE-2025-14953Low· 3.1A flaw has been found in Open5GS up to 2.7.5
CVE-2026-92417Medium· 6.5A vulnerability was found in Open5GS up to 2.8.0
CVE-2026-91855Medium· 5.3A security flaw has been discovered in Open5GS up to 2.7.7
CVE-2026-8252Medium· 4.3A vulnerability was determined in Open5GS up to 2.7.7