Skip to content
6.5 Medium

CVE-2026-32673 A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource…

Description

A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary system commands with higher privileges. In appliance mode deployments, a successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
BIG-IP 21.1 earliest → < 21.1.0 21.1.0
BIG-IP 21.0 21.0.0 → < 21.0.0.2 21.0.0.2
BIG-IP 17.5 17.5.0 → < 17.5.1.6 17.5.1.6
BIG-IP 17.1 17.1.0 → < 17.1.3.2 17.1.3.2
BIG-IP 16.1 16.1.0 → latest No fix stated
The 259 CVEs of BIG-IP →
Track this CVE