Description
A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project locked and limited conversation to collaborators.
Published: 2026-08-12
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in the Open5GS HSS Service involves a missing resource deallocation (CWE-404) when an attacker manipulates the Session-Id argument to the fd_msg_sess_get function, causing the service to crash and become unavailable. The vulnerability is rated moderate with a CVSS score of 5.3 and is exploitable remotely.

Affected Systems

The issue affects Open5GS HSS Service implementations up to and including version 2.7.6. Users running any of these releases should assess whether they expose the HSS service to external networks.

Risk and Exploitability

The EPSS score is reported to be below 1%, indicating a low probability of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. However, because the impact is denial‑of‑service and the attack can be conducted remotely, administrators should consider the risk moderate and take timely action to prevent potential outages.

Generated by OpenCVE AI on August 12, 2026 at 14:38 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Open5GS to a version newer than 2.7.6 that contains the fix for the fd_msg_sess_get handling of Session-Id.
  • Restart the HSS service to clear any stalled resources after applying the update.
  • Configure network controls to limit or filter external ULR requests to trusted sources to reduce the attack surface.
  • If an immediate update is not possible, isolate the HSS server behind a firewall and block all unsolicited ULR traffic until a patch can be applied.

Generated by OpenCVE AI on August 12, 2026 at 14:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 12 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 12 Aug 2026 02:45:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project locked and limited conversation to collaborators.
Title Open5GS HSS Service fd_msg_sess_get denial of service
First Time appeared Open5gs
Open5gs open5gs
Weaknesses CWE-404
CPEs cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
Vendors & Products Open5gs
Open5gs open5gs
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Open5gs Open5gs
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-12T16:57:20.691Z

Reserved: 2026-08-09T17:45:29.753Z

Link: CVE-2025-15686

cve-icon Vulnrichment

Updated: 2026-08-12T15:50:42.461Z

cve-icon NVD

Status : Deferred

Published: 2026-08-12T03:16:42.600

Modified: 2026-08-12T20:59:21.023

Link: CVE-2025-15686

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-12T15:30:02Z

Weaknesses
  • CWE-404

    Improper Resource Shutdown or Release