Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3.
CVSS Details
CVSS Score
5.3
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Configurations (Affected Products)
No configuration data available.
ixray-1.6-stcop < 1.3
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
def check_cve_2026_4733(target_url):
"""
Proof of Concept for CVE-2026-4733.
Checks for sensitive information disclosure in ixray-1.6-stcop.
"""
# Hypothetical endpoint that might leak information based on typical info disclosure flaws
# Replace with actual vulnerable endpoint if known
endpoint = "/sensitive-path-or-config"
try:
response = requests.get(f"{target_url}{endpoint}", timeout=10)
# Check if the response contains indicators of sensitive data
if response.status_code == 200:
print("[+] Potential vulnerability detected!")
print(f"[+] Status Code: {response.status_code}")
print(f"[+] Response Length: {len(response.text)}")
print(f"[+] Snippet: {response.text[:200]}")
else:
print(f"[-] Target returned status code: {response.status_code}")
except Exception as e:
print(f"[!] Error: {e}")
if __name__ == "__main__":
target = "http://127.0.0.1:8080" # Change target IP
check_cve_2026_4733(target)