CVE-2025-41067

High CVSS: 8.7

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI request that deletes the NRF's own registry causes a check that ends up crashing the NRF process and renders the discovery service unavailable.

Vendor

Open5gs

Product

Open5gs

CWE

CWE-617

Yayın Tarihi

2025-10-27 13:15:44

Güncelleme

2025-10-29 11:15:44

Source Identifier

cve-coordination@incibe.es

KEV Date Added

Kategoriler

CWE-617 Open5gs HIGH Open5gs 2025

Referanslar

https://open5gs.org/open5gs/release/2025/07/19/release-v2.7.6.html https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-newplanes-open5gs

Benzer Kayıtlar

Medium

CVE-2026-4988

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6…

Medium

CVE-2026-4240

A vulnerability was determined in Open5GS up to 2.7.6. The affected element is the function smf_gx_cca_cb/smf_gy_cca_cb/…

Medium

CVE-2026-2524

A flaw has been found in Open5GS 2.7.6. The impacted element is the function mme_s11_handle_create_session_response of t…

Medium

CVE-2026-2523

A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smf_gn_handle_create_pdp_conte…

Medium

CVE-2026-2522

A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/…

Medium

CVE-2026-2521

A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_re…