CVE-2025-15528

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-15528
A vulnerability has been found in Open5GS up to 2.7.6. Affected by this vulnerability is an unknown functionality of the component GTPv2 Bearer Response Handler. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 98f76e98df35cd6a35e868aa62715db7f8141ac1. A patch should be applied to remediate this issue.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/open5gs/open5gs/
https://github.com/open5gs/open5gs/commit/98f76e98df35cd6a35e868aa62715db7f8141ac1 Patch
https://github.com/open5gs/open5gs/issues/4225 Exploit Issue Tracking Vendor Advisory
https://github.com/open5gs/open5gs/issues/4225#issue-3769531006 Exploit Issue Tracking Vendor Advisory
https://vuldb.com/?ctiid.341595 Permissions Required VDB Entry
https://vuldb.com/?id.341595 Third Party Advisory VDB Entry
https://vuldb.com/?submit.728128 Third Party Advisory VDB Entry
https://vuldb.com/?submit.729359
https://vuldb.com/?submit.729360
https://vuldb.com/?submit.738373
Configurations

Configuration 1 (hide)

cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
History

17 Jun 2026, 08:37

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad ha sido encontrada en Open5GS hasta la versión 2.7.6. Afectada por esta vulnerabilidad es una funcionalidad desconocida del componente GTPv2 Bearer Response Handler. Dicha manipulación lleva a denegación de servicio. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado al público y puede ser usado. El nombre del parche es 98f76e98df35cd6a35e868aa62715db7f8141ac1. Un parche debería ser aplicado para remediar este problema.

23 Feb 2026, 09:16

Type Values Removed Values Added
References
  • () https://github.com/open5gs/open5gs/ -
  • () https://vuldb.com/?submit.729359 -
  • () https://vuldb.com/?submit.729360 -
  • () https://vuldb.com/?submit.738373 -

09 Feb 2026, 20:43

Type Values Removed Values Added
References () https://github.com/open5gs/open5gs/commit/98f76e98df35cd6a35e868aa62715db7f8141ac1 - () https://github.com/open5gs/open5gs/commit/98f76e98df35cd6a35e868aa62715db7f8141ac1 - Patch
References () https://github.com/open5gs/open5gs/issues/4225 - () https://github.com/open5gs/open5gs/issues/4225 - Exploit, Issue Tracking, Vendor Advisory
References () https://github.com/open5gs/open5gs/issues/4225#issue-3769531006 - () https://github.com/open5gs/open5gs/issues/4225#issue-3769531006 - Exploit, Issue Tracking, Vendor Advisory
References () https://vuldb.com/?ctiid.341595 - () https://vuldb.com/?ctiid.341595 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.341595 - () https://vuldb.com/?id.341595 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.728128 - () https://vuldb.com/?submit.728128 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
First Time Open5gs open5gs
Open5gs

16 Jan 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-16 22:16

Updated : 2026-06-17 08:37

NVD link : CVE-2025-15528

Mitre link : CVE-2025-15528

CVE.ORG link : CVE-2025-15528

JSON object : View

Products Affected

open5gs

  • open5gs
CWE
CWE-404

Improper Resource Shutdown or Release