CVE-2025-15530

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was determined in Open5GS up to 2.7.6. This affects the function sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request of the file /src/sgwc/s11-handler.c. Executing a manipulation can lead to reachable assertion. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The issue report is flagged as already-fixed.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

Vendor	Product	Versions
n/a	Open5GS	2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5; 2.7.6

References

https://github.com/open5gs/open5gs/
https://github.com/open5gs/open5gs/issues/4231Exploit, Issue Tracking, Vendor Advisory
https://github.com/open5gs/open5gs/issues/4231#issue-3774187007Exploit, Issue Tracking, Vendor Advisory
https://vuldb.com/?ctiid.341597Permissions Required, VDB Entry
https://vuldb.com/?id.341597Third Party Advisory, VDB Entry
https://vuldb.com/?submit.728987Third Party Advisory, VDB Entry

Timeline

Published: Jan 17, 2026
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-155315.3A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.CVE-2025-155327.5A security flaw has been discovered in Open5GS up to 2.7.5. This issue affects some unknown processing of the component Timer Handler. The m CVE-2025-155337.8A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageFontAtlas of the file CVE-2025-155347.8A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c.CVE-2025-155353.3A security flaw has been discovered in nicbarker clay up to 0.14. This affects the function Clay__MeasureTextCached in the library clay.h. T CVE-2025-155365.5A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the fil CVE-2025-155375.5A security vulnerability has been detected in Mapnik up to 4.2.0. This issue affects the function mapnik::dbf_file::string_value of the file CVE-2025-155387.8A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function A CVE-2025-155397.5A vulnerability was determined in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_downlink_data_notification_ack of the file s CVE-2025-155408.8"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxi CVE-2025-155416.3Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access sys CVE-2025-155425.3Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE mess