CVE-2025-15417

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is publicly available and might be used. The name of the patch is 465273d13ba5d47b274c38c9d1b07f04859178a1. A patch should be applied to remediate this issue.

• CWE-404

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1Patch
• https://github.com/open5gs/open5gs/issues/4203Exploit, Issue Tracking, Vendor Advisory
• https://github.com/open5gs/open5gs/issues/4203#issue-3719257558Exploit, Issue Tracking, Vendor Advisory
• https://github.com/open5gs/open5gs/issues/4203#issuecomment-3681643498Exploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.339339Permissions Required, VDB Entry
• https://vuldb.com/?id.339339Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.727616Third Party Advisory, VDB Entry
• https://github.com/open5gs/open5gs/issues/4203#issue-3719257558Exploit, Issue Tracking, Vendor Advisory

Published

Jan 1, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15411A weakness has been identified in WebAssembly wabt up to 1.0…7.8
• CVE-2025-15412A security vulnerability has been detected in WebAssembly wa…7.8
• CVE-2025-15413A vulnerability was detected in wasm3 up to 0.5.0. Impacted …7.8
• CVE-2025-15414A flaw has been found in go-sonic sonic up to 1.1.4. The aff…4.7
• CVE-2025-15415A vulnerability has been found in xnx3 wangmarket up to 6.4.…5.4
• CVE-2025-15416A vulnerability was found in xnx3 wangmarket up to 6.4. This…5.4
• CVE-2025-15418A security flaw has been discovered in Open5GS up to 2.7.6. …5.5
• CVE-2025-15419A weakness has been identified in Open5GS up to 2.7.6. Affec…5.5
• CVE-2025-1542Improper permission control vulnerability in the OXARI Servi…9.3
• CVE-2025-15420A security vulnerability has been detected in Yonyou KSOA 9.…9.8
• CVE-2025-15421A vulnerability was detected in Yonyou KSOA 9.0. This vulner…9.8
• CVE-2025-15422A flaw has been found in EmpireSoft EmpireCMS up to 8.0. Thi…7.5