CVE-2025-15686
Open5GS HSS Service fd_msg_sess_get denial of service
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project locked and limited conversation to collaborators.
| CWE | CWE-404 |
| Vendor | n/a |
| Product | open5gs |
| Published | Aug 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a open5gs
Be the first to know when new medium vulnerabilities affecting n/a open5gs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Open5GS
2.7.0 2.7.1 2.7.2 2.7.3 2.7.4 2.7.5 2.7.6
References
vuldb.com: https://vuldb.com/vuln/387279 vuldb.com: https://vuldb.com/vuln/387279/cti vuldb.com: https://vuldb.com/cve/CVE-2025-15686 vuldb.com: https://vuldb.com/submit/867104 github.com: https://github.com/open5gs/open5gs/issues/4190 github.com: https://github.com/user-attachments/files/23847497/HSS_ULR_error_poc.pcapng.zip github.com: https://github.com/open5gs/open5gs/
Credits
🔍 WeiYi (VulDB User) VulDB CNA Team