| CVE-2026-94127 |
Exploited
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
|
9.8
Critical
|
Sep 22, 2026 |
| CVE-2026-63020 |
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error…
|
3.1
Low
|
Sep 2, 2026 |
| CVE-2026-66842 |
BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts…
|
8.8
High
|
Sep 2, 2026 |
| CVE-2026-59762 |
When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory…
|
7.5
High
|
Jul 15, 2026 |
| CVE-2026-40423 |
When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-24464 |
When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that…
|
6.8
Medium
|
May 13, 2026 |
| CVE-2026-39458 |
When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, Advanced…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-42930 |
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-41959 |
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-42406 |
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-42058 |
An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local…
|
4.3
Medium
|
May 13, 2026 |
| CVE-2026-32643 |
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-42937 |
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-32673 |
A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-41217 |
A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker…
|
6.0
Medium
|
May 13, 2026 |
| CVE-2026-39455 |
When the BIG-IP Configuration utility is configured to use Lightweight Directory Access Protocol (LDAP)…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-34176 |
When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-42063 |
A vulnerability exists in iControl SOAP where an authenticated attacker with the Resource Administrator or Administrator…
|
4.9
Medium
|
May 13, 2026 |
| CVE-2026-39459 |
A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged, authenticated attacker with…
|
7.2
High
|
May 13, 2026 |
| CVE-2026-41225 |
A vulnerability exists in iControl REST where a highly privileged, authenticated attacker with at least the Manager role…
|
7.2
High
|
May 13, 2026 |
| CVE-2026-41953 |
A vulnerability exists in BIG-IP systems where a highly privileged, authenticated attacker with at least the Resource…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-40631 |
An authenticated attacker with the Resource Administrator or Administrator role can modify configuration objects through…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-40698 |
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-42924 |
An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-40060 |
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause…
|
7.5
High
|
May 13, 2026 |