Critical F5 BIG-IP Vulnerability Actively Being Exploited and New POCs Released

Read the original article: Critical F5 BIG-IP Vulnerability Actively Being Exploited and New POCs Released


In a recent report, NCC Group elaborates on the recent discovery of the active exploitation of CVE-2021-22986. This vulnerability allows for unauthenticated, remote code execution of F5 BIG-IP devices through the BIG-IQ iControl REST API. F5 has since patched the vulnerability, but there are currently 6,791 potentially vulnerable devices online at the time of writing. […]

The post Critical F5 BIG-IP Vulnerability Actively Being Exploited and New POCs Released appeared first on Binary Defense.


Read the original article: Critical F5 BIG-IP Vulnerability Actively Being Exploited and New POCs Released