| CVE-2026-41227 |
On an HTTP/2 virtual server with Layer 7 DoS Protection configured, undisclosed traffic can result in an increase in…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-42409 |
When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-35062 |
An authenticated iControl SOAP user may be able to obtain information of other accounts. Note: Software versions…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-40061 |
When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh)…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-40618 |
When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-42920 |
When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-41956 |
When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-41218 |
When BIG-IP PEM iRules are configured on a virtual server (iRules using commands starting with CLASSIFICATION::,…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-40629 |
When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-42919 |
A vulnerability exists in BIG-IP systems that may allow an authenticated attacker with administrative access to escalate…
|
6.7
Medium
|
May 13, 2026 |
| CVE-2026-42781 |
When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-40067 |
When a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the apmd process to…
|
7.5
High
|
May 13, 2026 |
| CVE-2026-42408 |
When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command that may allow a…
|
4.4
Medium
|
May 13, 2026 |
| CVE-2026-41957 |
An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ…
|
8.8
High
|
May 13, 2026 |
| CVE-2026-34019 |
When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic…
|
6.3
Medium
|
May 13, 2026 |
| CVE-2026-40699 |
A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-42780 |
A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authenticated attacker with high…
|
4.9
Medium
|
May 13, 2026 |
| CVE-2026-40462 |
Incorrect permission assignment vulnerabilities exist in iControl REST and TMOS shell (tmsh) undisclosed command which…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-28758 |
When BIG-IP DNS is provisioned, a vulnerability exists in the gtm_add and bigip_add iControl REST commands that return…
|
4.4
Medium
|
May 13, 2026 |
| CVE-2026-41219 |
An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-40435 |
When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from…
|
5.3
Medium
|
May 13, 2026 |
| CVE-2026-41954 |
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh)…
|
4.9
Medium
|
May 13, 2026 |
| CVE-2026-40703 |
A cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility. Note:…
|
5.4
Medium
|
May 13, 2026 |
| CVE-2026-2507 |
When BIG-IP AFM or BIG-IP DDoS is provisioned, undisclosed traffic can cause TMM to terminate. Note: Software…
|
7.5
High
|
Feb 18, 2026 |
| CVE-2026-20732 |
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error…
|
3.1
Low
|
Feb 4, 2026 |