CVE-2025-15529

Medium

Description

A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_handle_create_session_response of the file src/sgwc/s5c-handler.c. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The patch is named b19cf6a2dbf5d30811be4488bf059c865bd7d1d2. To fix this issue, it is recommended to deploy a patch.

SeverityMedium

CVSS5.3

Exploit probability—

ProductOpen5gs

PublishedJan 16, 2026

First seenJan 16, 2026

Weakness typeCWE-404CWE-404

How to fix

Patches

github.com/open5gs/open5gs/commit/b19cf6a2dbf5d30811be4488bf059c865bd7d1d2

Affected products

Product	Affected versions	Fixed in
open5gs open5gs	v ≤ 2.7.6	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.