8.1
Élevée
CVE-2026-20916 An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed…
Description
An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIG-IQ 8.4 | 8.4.0 → < 8.4.1 | 8.4.1 |
Références
- my.f5.com my.f5.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de BIG-IQ
Les 20 CVE de BIG-IQ →
CVE-2026-66842
BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts…
8.8
Élevée
CVE-2026-42406
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least…
8.7
Élevée
CVE-2026-41959
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics…
6.5
Moyenne
CVE-2026-42937
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and…
6.5
Moyenne