K000151611: BIG-IP iRules vulnerability CVE-2025-46706

Security Advisory Description When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. CVE-2025-46706 Impact System performance can degrade until the Traffic Management Microkernel TMM process ...

K000156912: BIG-IP TMM vulnerability CVE-2025-61990

Security Advisory Description When using a multi-bladed platform with more than one active blade, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-61990 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote,...

K000151309: BIG-IP DTLS 1.2 vulnerability CVE-2025-61951

Security Advisory Description Undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. This issue may occur when a Datagram Transport Layer Security DTLS 1.2 virtual server is enabled with a Server SSL profile that is configured with a certificate, key, and the SSL Sign...

K000151596: BIG-IP TMM vulnerability CVE-2025-54805

Security Advisory Description When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in Traffic Management Microkernel TMM memory resource utilization. CVE-2025-54805 Impact System performance degradation can occur...

K000156623: BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability CVE-2025-58120

Security Advisory Description When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-58120 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote, unauthenticated attacker to cause a...

K000154664: BIG-IP Advanced WAF and ASM vulnerability CVE-2025-61935

Security Advisory Description When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. CVE-2025-61935 Impact Traffic is disrupted while the bd process restarts. This vulnerability allows a remote,...

K000156746: BIG-IP IPsec vulnerability CVE-2025-58071

Security Advisory Description When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-58071 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote, unauthenticated attacker t...

K000148816: BIG-IP APM and SSL Orchestrator vulnerability CVE-2025-47148

Security Advisory Description When the BIG-IP system is configured as both a Security Assertion Markup Language SAML service provider SP and Identity Provider IdP, with single logout SLO enabled on an access policy, undisclosed requests can cause an increase in memory resource utilization...

K000150637: BIG-IP DNS cache vulnerability CVE-2025-59781

Security Advisory Description When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization. CVE-2025-59781 Impact System performance can degrade until the Traffic Management Microkernel TMM process is eith...

K000150614: BIG-IP MPTCP vulnerability CVE-2025-48008

Security Advisory Description When a TCP profile with Multipath TCP MPTCP enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-48008 Impact Traffic is disrupted...

K000156597: BIG-IP APM portal access vulnerability CVE-2025-61960

Security Advisory Description When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-61960 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allo...

K90301300: BIG-IP Configuration utility vulnerability CVE-2025-59268

Security Advisory Description On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. CVE-2025-59268 Impact This vulnerability may allow an unauthenticated attacker with netwo...

K000156801: BIG-IP Configuration utility vulnerability CVE-2025-54755

Security Advisory Description A directory traversal vulnerability exists in the BIG-IP Configuration utility that allows a highly privileged authenticated attacker to access files which are not limited to the intended files. CVE-2025-54755 Impact A highly privileged authenticated attacker may...

K000151308: BIG-IP Configuration utility XSS vulnerability CVE-2025-59269

Security Advisory Description A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. CVE-2025-59269 Impact An authenticated attacker with at least t...

K000156642: BIG-IP iControl REST and tmsh vulnerability CVE-2025-59481

Security Advisory Description A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell tmsh command that may allow an authenticated attacker with at least the resource administrator role to execute arbitrary system commands with higher privileges. A successful exploit can allo...

K000156624: BIG-IP Advanced WAF and ASM bd process vulnerability CVE-2025-61938

Security Advisory Description When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manually or through the automatic Policy Builder, the bd process can terminate repeatedly...

F5 BIG-IP和F5 SSL Orchestrator 缓冲区错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A memory corruption vulnerability exists in the Explicit Forward Proxy module of the BIG-IP SSL Orchestrator. The vulnerabilit...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the IPsec module of BIG-IP, which can be exploited to cause the termination of the...

F5 Networks BIG-IP : BIG-IP DTLS 1.2 vulnerability (K000151309)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6.1 / 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000151309 advisory. Undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. This issue may occur wh...

F5 Networks BIG-IP : BIG-IP HSB vulnerability (K000151658)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.0 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000151658 advisory. Under undisclosed traffic conditions along with conditions beyond the attacker's control,...