CVE-2025-15531

low-risk
Published 2026-01-17

A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The issue report is flagged as already-fixed.

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Open5Gs

References (6)

https://github.com/open5gs/open5gs/
Exploit https://github.com/open5gs/open5gs/issues/4233
Exploit https://github.com/open5gs/open5gs/issues/4233#issue-3776216182
Permissions Required https://vuldb.com/?ctiid.341598
Third Party Advisory https://vuldb.com/?id.341598
Third Party Advisory https://vuldb.com/?submit.729339
26
/ 100
low-risk
Severity 21/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal