F5 BIG-IP Shared Auth Bypass (CVE-2023-46747) for 2026-10-19
Oct 19, 2026
Exploitation
Last Updated: 00:00 UTC
CVE-2023-46747 is an authentication bypass via /mgmt/shared/authn/ in the F5 BIG-IP Configuration Utility. When chained with CVE-2023-46748 (SQL injection in the same component) the combination achieves unauthenticated RCE on BIG-IP appliances.
CVE References
MITRE ATT&CK
Tactic: Initial Access (TA0001)
Technique: T1190 — Exploit Public-Facing Application
Observed URIs
Attackers by Country
| Sweden | 3 | 50.0% |
| Bulgaria | 1 | 16.7% |
| United States | 1 | 16.7% |
| United Kingdom | 1 | 16.7% |
IP Address : ASN : City/Provider
-
185.196.9.61 : unknown : unknown
-
198.167.197.162 : AS39287 Materialism s.r.l. : Sweden
-
198.167.197.194 : AS39287 Materialism s.r.l. : Sweden
-
198.167.197.204 : AS39287 Materialism s.r.l. : Sweden
-
45.141.233.14 : AS201814 MEVSPACE sp. z o.o. : Bulgaria
-
74.82.47.18 : AS6939 Hurricane Electric LLC : Centerfield
-
78.153.140.178 : AS202306 Hostglobal.plus Ltd : City of London