Aller au contenu

Vulnérabilités connues pour F5 BIG-IP

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-94127 Exploitée F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability 9.8 Critique 22 sept. 2026
CVE-2026-63020 A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error… 3.1 Faible 2 sept. 2026
CVE-2026-66842 BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts… 8.8 Élevée 2 sept. 2026
CVE-2026-59762 When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory… 7.5 Élevée 15 juil. 2026
CVE-2026-40423 When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel… 7.5 Élevée 13 mai 2026
CVE-2026-24464 When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that… 6.8 Moyenne 13 mai 2026
CVE-2026-39458 When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, Advanced… 7.5 Élevée 13 mai 2026
CVE-2026-42930 When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass… 8.7 Élevée 13 mai 2026
CVE-2026-41959 Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics… 6.5 Moyenne 13 mai 2026
CVE-2026-42406 A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least… 8.7 Élevée 13 mai 2026
CVE-2026-42058 An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local… 4.3 Moyenne 13 mai 2026
CVE-2026-32643 A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least… 8.7 Élevée 13 mai 2026
CVE-2026-42937 Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and… 6.5 Moyenne 13 mai 2026
CVE-2026-32673 A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource… 6.5 Moyenne 13 mai 2026
CVE-2026-41217 A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker… 6.0 Moyenne 13 mai 2026
CVE-2026-39455 When the BIG-IP Configuration utility is configured to use Lightweight Directory Access Protocol (LDAP)… 7.5 Élevée 13 mai 2026
CVE-2026-34176 When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed… 8.7 Élevée 13 mai 2026
CVE-2026-42063 A vulnerability exists in iControl SOAP where an authenticated attacker with the Resource Administrator or Administrator… 4.9 Moyenne 13 mai 2026
CVE-2026-39459 A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged, authenticated attacker with… 7.2 Élevée 13 mai 2026
CVE-2026-41225 A vulnerability exists in iControl REST where a highly privileged, authenticated attacker with at least the Manager role… 7.2 Élevée 13 mai 2026
CVE-2026-41953 A vulnerability exists in BIG-IP systems where a highly privileged, authenticated attacker with at least the Resource… 8.7 Élevée 13 mai 2026
CVE-2026-40631 An authenticated attacker with the Resource Administrator or Administrator role can modify configuration objects through… 8.7 Élevée 13 mai 2026
CVE-2026-40698 A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least… 8.7 Élevée 13 mai 2026
CVE-2026-42924 An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects… 8.7 Élevée 13 mai 2026
CVE-2026-40060 When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause… 7.5 Élevée 13 mai 2026

Autres produits F5