CVE-2025-15539

low-risk
Published 2026-01-19

A vulnerability was determined in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_downlink_data_notification_ack of the file src/sgwc/s11-handler.c of the component sgwc. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: b4707272c1caf6a7d4dca905694ea55557a0545f. To fix this issue, it is recommended to deploy a patch. The issue report is flagged as already-fixed.

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Open5Gs

References (7)

https://github.com/open5gs/open5gs/
Patch https://github.com/open5gs/open5gs/commit/b4707272c1caf6a7d4dca905694ea55557a054...
Exploit https://github.com/open5gs/open5gs/issues/4230
Exploit https://github.com/open5gs/open5gs/issues/4230#issue-3774173079
Permissions Required https://vuldb.com/?ctiid.341732
Third Party Advisory https://vuldb.com/?id.341732
Third Party Advisory https://vuldb.com/?submit.735339
26
/ 100
low-risk
Severity 21/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal