CVE-2026-20730

A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-22549

The CVE-2026-22549 issue affects BIG-IP Container Ingress Services for Kubernetes and OpenShift. Affects CIS components (Kubernetes/OpenShift deployment) with CIS versions 2.0.0–2.20.1 known to be vulnerable; fix introduced in 2.20.2. Root cause: excessive permissions enabling read access to clus...

EUVD-2026-5508

A vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions to read cluster secrets. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-20732 BIG-IP Configuration utility vulnerability

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

EUVD-2026-5462

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-20732 BIG-IP Configuration utility vulnerability

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-20730

Summary: CVE-2026-20730 affects BIG-IP Edge Client and browser VPN clients on Windows. The Red Hat, CIRCL, Nessus, and F5 advisories corroborate a local-access vulnerability in these components that may allow an attacker to list processes and obtain session IDs/URLs/data passed to binaries being ...

K000159076: Quarterly Security Notification (February 2026)

Security Advisory Description On February 4, 2026, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associate...

K000158072: BIG-IP Advanced WAF and ASM vulnerability CVE-2026-22548

Security Advisory Description When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's control can cause the bd process to terminate. CVE-2026-22548 Impact Traffic is disrupted while the bd process...

K000158931: BIG-IP Edge Client for Windows vulnerability CVE-2026-20730

Security Advisory Description A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information. CVE-2026-20730 Impact An attacker with local access could exploit this vulnerability to list processes and obtain session...

K000156644: BIG-IP Configuration utility vulnerability CVE-2026-20732

Security Advisory Description A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages. CVE-2026-20732 Impact An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in...

K000156643: BIG-IP SMTP configuration security exposure

Security Advisory Description An authenticated attacker granted the guest role on a BIG-IP system can modify the SMTP Server Host Name as well as the SMTP Server Port Number settings and run the Test Connection feature. This issue occurs when the following condition is met: The affected BIG-IP...

F5 BIG-IP 竞争条件问题漏洞

F5 BIG-IP is an application delivery platform developed by F5 Technologies in the United States. It integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IP has a competition condition vulnerability; this vulnerability occurs when...

F5 BIG-IP Edge Client 信息泄露漏洞

F5 BIG-IP Edge Client is a security remote access client software developed by F5 Corporation in the United States. The F5 BIG-IP Edge Client has a vulnerability related to information leakage, which may allow attackers to access sensitive data...

PT-2026-6107

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Container Ingress Services affected versions not specified Description A flaw exists in F5 BIG-IP Container Ingress Services that could permit excessive permissions, potentially allowing unauthorized access to read cluster secrets...

PT-2026-6106

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF and ASM affected versions not specified Description A configuration issue within BIG-IP Advanced WAF or ASM security policies on a virtual server can lead to the termination of the bd process due to undisclosed requests...

PT-2026-6086

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An issue exists in an undisclosed BIG-IP Configuration utility page that could allow an attacker to spoof error messages. Recommendations At the moment, there is no information about a newe...

PT-2026-6085

Name of the Vulnerable Software and Affected Versions BIG-IP Edge Client and browser VPN clients on Windows affected versions not specified Description A security issue exists in BIG-IP Edge Client and browser VPN clients on Windows that could allow attackers to access sensitive information...

PT-2026-5865

Name of the Vulnerable Software and Affected Versions IBM Db2 Big SQL on Cloud Pak for Data versions 7.6 on CP4D 4.8 through 7.8 on CP4D 5.1 Description IBM Db2 Big SQL on Cloud Pak for Data does not properly limit the allocation of system resources. An authenticated user with internal knowledge ...

Oracle GoldenGate for Big Data Resource Allocation Vulnerability 19.1.x < 19.1.0.0.21 / 21.x < 21.21.0.0.0 (October 2025 CPU)

According to its self-reported version number, the Oracle GoldenGate for Big Data application located on the remote host is affected by multiple vulnerabilities: - Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All API...