High severity · published Jan 17, 2026
CVE-2025-15532
Open5GS Timer resource consumption
7.5
CVSS
1.1%
EPSS
No
On KEV
Description
A security flaw has been discovered in Open5GS up to 2.7.5. This issue affects some unknown processing of the component Timer Handler. The manipulation results in resource consumption. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The patch is identified as c7c131f8d2cb1195ada5e0e691b6868ebcd8a845. It is best practice to apply a patch to resolve this issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Open5GS · Open5gs
2.7.0; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.5 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15532
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15532
github.com
https://github.com/open5gs/open5gs/
Patch
https://github.com/open5gs/open5gs/commit/c7c131f8d2cb1195ada5e0e691b6868ebcd8a845
Exploit
https://github.com/open5gs/open5gs/issues/4220
Exploit
https://github.com/open5gs/open5gs/issues/4220#issue-3766066853
Exploit
https://github.com/open5gs/open5gs/issues/4221
Permissions Required
https://vuldb.com/?ctiid.341599
More from Open5GS
9.8
CVE-2026-2522
Open5GS MME esm-build.c memory corruption
9.8
CVE-2026-2521
Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption
9.8
CVE-2024-40130
open5gs v2.6.4 is vulnerable to Buffer Overflow
9.8
CVE-2024-40129
Open5GS v2.6.4 is vulnerable to Buffer Overflow
9.8
CVE-2021-28122
A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1