F5 Big-IP

Unauthed RCE in F5 BIG-IP

F5 iControl REST API exposed?

 curl -sk https://$host/mgmt/shared/authn/login

GitHub - horizon3ai/CVE-2022-1388: POC for CVE-2022-1388GitHub

CVE-2023-46747 - RCE

GitHub - W01fh4cker/CVE-2023-46747-RCE: exploit for f5-big-ip RCE cve-2023-46747GitHub

CVE-2024-45844 - Privilege Escalation

CVE-2024-45844: Privilege escalation in F5 BIG-IP - Almond Offensive Security Blog

CVE-2025-20029: Command Injection in TMSH CLI

GitHub - mbadanoiu/CVE-2025-20029: CVE-2025-20029: Command Injection in TMSH CLI in F5 BIG-IPGitHub

CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP

GitHub - mbadanoiu/CVE-2025-31644: CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IPGitHub