Description
F5 BIG-IP是美国F5公司的一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的应用交付平台。该产品中存在sql注入漏洞，此漏洞是由于login接口对用户的请求验证不当导致的。
F5 BIG-IP Next Central Manager CVE-2024-26026 SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2024-26026
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/F5-BIG-IP/F5-BIG-IP%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(CVE-2024-26026)&(CVE-2024-21793).md
https://www.ithome.com.tw/news/162774
https://avd.aliyun.com/detail?id=AVD-2024-26026
https://www.tenable.com/cve/CVE-2024-26026
https://my.f5.com/manage/s/article/K000138733
https://www.tenablecloud.cn/plugins/was/114281
https://cloud.tencent.com/developer/article/2417451
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-21793-and-cve-2024-26026-two-recent-vulnerabilities-affecting-f5-big-ip-next-central-manager
https://www.helpnetsecurity.com/2024/05/09/cve-2024-21793-cve-2024-26026/