What’s Vulnerable › Vulnerabilities

CVE-2025-56568

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-30 · updated 2026-06-17
• Weakness: CWE-617

Description

Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 allows remote attackers to cause denial of service via specially crafted NGAP messages containing malformed length fields in protocol configuration data.

References

• https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e
• https://github.com/open5gs/open5gs/issues/3969

Get alerted when CVE-2025-56568 or the next vulnerability affects your stack