module

F5 BIG-IP iControl RCE via REST Authentication Bypass

Disclosed
May 4, 2022

Description

This module exploits an authentication bypass vulnerability
in the F5 BIG-IP iControl REST service to gain access to the
admin account, which is capable of executing commands
through the /mgmt/tm/util/bash endpoint.

Successful exploitation results in remote code execution
as the root user.
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.