Skip to content
8.7 High

CVE-2026-42924 An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects…

Description

An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP resulting in privilege escalation.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
BIG-IP 21.1 earliest → < 21.1.0 21.1.0
BIG-IP 21.0 21.0.0 → < 21.0.0.1 21.0.0.1
BIG-IP 17.5 17.5.0 → < 17.5.1.4 17.5.1.4
BIG-IP 17.1 17.1.0 → < 17.1.3.1 17.1.3.1
BIG-IP 16.1 16.1.0 → latest No fix stated
The 259 CVEs of BIG-IP →
Track this CVE