PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2021-22986] Emerging Threat Notification: F5 Networks Vulnerabilities for BIG-IP and BIG-IQ Products

bishopfox.com | blog | CVE-2021-22986 | #rce | #vulnerability | #advisory | #f5 | #big-ip | #big-iq | #cve-2021-22986
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

F5 released fixes for seven BIG-IP and BIG-IQ vulnerabilities, headlined by critical unauthenticated RCE CVE-2021-22986 in iControl REST, found by Google's Project Zero; a PoC is public.
CVE
CVE-2021-22986
Published
Collected

Related coverage

vulnerability · bishopfox.com
CVE-2022-1388: Scan BIG-IP for Exact Release Versions
Bishop Fox released a scanner that fingerprints exact F5 BIG-IP software versions from HTTP responses, helping defenders quickly assess exposure to CVE-2022-1388, a critical auth-bypass RCE.
vulnerability · swarm.ptsecurity.com
Remote Code Execution in F5 Big‑IP
Mikhail Klyuchnikov recounts discovering CVE-2020-5902, an unauthenticated RCE rated CVSS 10 in F5 Big-IP's TMUI web interface, with over 8,000 devices exposed on the internet before fixes.
vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
research · blog.viettelcybersecurity.com
Chiến dịch khai thác lỗ hổng thực thi mã từ xa trên các hệ thống sử dụng F5 BIG-IP - Phần II
Part two documents in-the-wild CVE-2022-1388 exploitation on F5 BIG-IP in Vietnam: attackers scan exposed interfaces, POST to /mgmt/tm/util/bash for RCE, then plant webshells from May 7, 2022.
Back