Description
F5 BIG-IP Next Central Manager 可用于全面管理、自动化和监控部署在任何地方的众多 BIG-IP Next 实例。2024年5月8日，官方披露其存在CVE-2024-26026 F5 BIG-IP Next Central Manager SQL注入漏洞，攻击者可在无需登陆的情况下利用注入获取数据库中的敏感信息。
F5 BIG-IP Next Central Manager SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://my.f5.com/manage/s/article/K000138733
https://www.cnblogs.com/LeouMaster/p/18192352
https://www.hnitns.com/index.php?id=232
https://www.tenable.com/plugins/nessus/195236
https://fortiguard.fortinet.com/encyclopedia/ips/55826
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/F5-BIG-IP/F5-BIG-IP存在SQL注入漏洞(CVE-2024-26026)&(CVE-2024-21793).md
https://www.ithome.com.tw/news/162774
https://its.ny.gov/2024-048
https://www.csoonline.com/article/2099508/f5-patches-big-ip-next-central-manager-flaws-that-could-lead-to-device-takeover.html
https://app.opencve.io/cve/?product=big-ip_next_central_manager&vendor=f5
https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/
https://www.securityweek.com/f5-patches-dangerous-vulnerabilities-in-big-ip-next-central-manager/