| CVE-2026-59762 |
When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory…
|
7.5
High
|
Jul 15, 2026 |
| CVE-2026-42409 |
When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-40618 |
When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-41956 |
When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-40629 |
When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop…
|
7.5
High
|
May 13, 2026 |
| CVE-2025-61990 |
When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management…
|
7.5
High
|
Oct 15, 2025 |
| CVE-2025-58071 |
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to…
|
7.5
High
|
Oct 15, 2025 |
| CVE-2025-61974 |
When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory…
|
7.5
High
|
Oct 15, 2025 |
| CVE-2025-58120 |
When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to…
|
7.5
High
|
Oct 15, 2025 |
| CVE-2025-54479 |
When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed…
|
7.5
High
|
Oct 15, 2025 |
| CVE-2025-55670 |
On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes systems, repeated undisclosed API calls can cause…
|
6.5
Medium
|
Oct 15, 2025 |
| CVE-2025-54805 |
When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process…
|
6.5
Medium
|
Oct 15, 2025 |
| CVE-2025-59781 |
When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an…
|
7.5
High
|
Oct 15, 2025 |
| CVE-2025-46706 |
When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause…
|
7.5
High
|
Oct 15, 2025 |
| CVE-2025-60016 |
When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's…
|
7.5
High
|
Oct 15, 2025 |
| CVE-2025-48008 |
When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along…
|
7.5
High
|
Oct 15, 2025 |
| CVE-2025-54500 |
An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to…
|
5.3
Medium
|
Aug 13, 2025 |
| CVE-2025-41414 |
When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to…
|
7.5
High
|
May 7, 2025 |
| CVE-2025-36504 |
When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase…
|
7.5
High
|
May 7, 2025 |
| CVE-2025-41399 |
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can…
|
7.5
High
|
May 7, 2025 |
| CVE-2025-36557 |
When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests…
|
7.5
High
|
May 7, 2025 |
| CVE-2025-24312 |
When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server…
|
7.5
High
|
Feb 5, 2025 |
| CVE-2024-41164 |
When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with…
|
5.9
Medium
|
Aug 14, 2024 |
| CVE-2024-28132 |
Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated…
|
4.4
Medium
|
May 8, 2024 |
| CVE-2024-25560 |
When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel…
|
7.5
High
|
May 8, 2024 |