CVE-2026-4822 Iperius Backup 临时文件权限不当漏洞

import os import ctypes import sys def check_vulnerability(): # Target path based on the CVE description target_path = r"C:\ProgramData\IperiusBackup\Jobs\" test_file = os.path.join(target_path, "poc_test_file.tmp") print(f"[*] Checking permissions on: {target_path}") if not os.path.exists(target_path): print("[-] Target directory does not exist. Software may not be installed.") return try: # Attempt to create a file in the target directory # If successful, a low-privileged user can write to this sensitive location with open(test_file, 'w') as f: f.write("VULNERABILITY_TEST") print("[+] SUCCESS: Low-privileged user can write to the Jobs directory!") print("[+] This indicates a potential Insecure Permissions vulnerability (CVE-2026-4822).") # Cleanup os.remove(test_file) except PermissionError: print("[-] FAILED: Write access denied. The vulnerability might be patched or permissions are correctly set.") except Exception as e: print(f"[-] ERROR: {e}") if __name__ == "__main__": # Check if running as admin (optional, usually we want to run as low-priv user to test) if ctypes.windll.shell32.IsUserAnAdmin(): print("[!] WARNING: Running as Administrator. Run as a standard user to accurately test for privilege escalation vectors.") check_vulnerability()