CVE-2025-15419

A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_handle_create_session_response of the file src/sgwc/s5c-handler.c of the component GTPv2-C Flow Handler. Executing a manipulation can lead to denial of service. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. This patch is called 5aaa09907e7b9e0a326265a5f08d56f54280b5f2. It is advisable to implement a patch to correct this issue.

• CWE-404

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/commit/5aaa09907e7b9e0a326265a5f08d56f54280b5f2Patch
• https://github.com/open5gs/open5gs/issues/4224Exploit, Issue Tracking, Vendor Advisory
• https://github.com/open5gs/open5gs/issues/4224#issue-3766767406Exploit, Issue Tracking, Vendor Advisory
• https://github.com/open5gs/open5gs/issues/4224#issuecomment-3698521008Exploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.339341Permissions Required, VDB Entry
• https://vuldb.com/?id.339341Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.728044Third Party Advisory, VDB Entry

Published

Jan 2, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15413A vulnerability was detected in wasm3 up to 0.5.0. Impacted …7.8
• CVE-2025-15414A flaw has been found in go-sonic sonic up to 1.1.4. The aff…4.7
• CVE-2025-15415A vulnerability has been found in xnx3 wangmarket up to 6.4.…5.4
• CVE-2025-15416A vulnerability was found in xnx3 wangmarket up to 6.4. This…5.4
• CVE-2025-15417A vulnerability was identified in Open5GS up to 2.7.6. Affec…5.5
• CVE-2025-15418A security flaw has been discovered in Open5GS up to 2.7.6. …5.5
• CVE-2025-1542Improper permission control vulnerability in the OXARI Servi…9.3
• CVE-2025-15420A security vulnerability has been detected in Yonyou KSOA 9.…9.8
• CVE-2025-15421A vulnerability was detected in Yonyou KSOA 9.0. This vulner…9.8
• CVE-2025-15422A flaw has been found in EmpireSoft EmpireCMS up to 8.0. Thi…7.5
• CVE-2025-15423A vulnerability has been found in EmpireSoft EmpireCMS up to…8.8
• CVE-2025-15424A vulnerability was found in Yonyou KSOA 9.0. The affected e…9.8