CVE-2025-15530: Open5GS s11-handler.c assertion

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-01-17 · updated 2026-06-17
Weakness: CWE-617

Description

A vulnerability was determined in Open5GS up to 2.7.6. This affects the function sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request of the file /src/sgwc/s11-handler.c. Executing a manipulation can lead to reachable assertion. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The issue report is flagged as already-fixed.

Affected products

Open5GS: through 2.7.6

References

https://github.com/open5gs/open5gs/
https://github.com/open5gs/open5gs/issues/4231
https://github.com/open5gs/open5gs/issues/4231#issue-3774187007
https://vuldb.com/?ctiid.341597
https://vuldb.com/?id.341597
https://vuldb.com/?submit.728987

Get alerted when CVE-2025-15530 or the next vulnerability affects your stack