CVE-2025-48008 BIG-IP MPTCP vulnerability

When a TCP profile with Multipath TCP MPTCP enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS ar...

CVE-2025-60016

CVE-2025-60016 affects BIG-IP/TMM when a Diffie-Hellman ECC Brainpool curve is configured in an SSL profile (Cipher Rule or Cipher Group) and that profile is applied to a virtual server. Traffic that is not disclosed can cause the Traffic Management Microkernel (TMM) to terminate, resulting in Do...

CVE-2025-59478 BIG-IP AFM DoS protection profile vulnerability

When a BIG-IP AFM denial-of-service DoS protection profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59478 BIG-IP AFM DoS protection profile vulnerability

When a BIG-IP AFM denial-of-service DoS protection profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-53474 BIG-IP iRules vulnerability

When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-61960: NULL Pointer Dereference

When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-58096: Out-of-bounds Write

When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2025-42335

Name of the Vulnerable Software and Affected Versions BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes affected versions not specified Description Repeated undisclosed API calls can cause the Traffic Management Microkernel TMM to terminate. The affected systems include BIG-IP Next...

CVE-2025-41430: Allocation of Resources Without Limits or Throttling

When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K000156912)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000156912 advisory. When using a multi-bladed platform with more than one active blade, undisclosed traffic can...

PT-2025-42337

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw in the Traffic Management Microkernel TMM can lead to denial of service. When the database variable tm.tcpudptxchecksum is configured with a non-default value on a BIG-IP...

PT-2025-42344

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw exists in the BIG-IP Application Firewall Manager AFM when a DoS protection profile is configured on a virtual server. Undisclosed requests can lead to the termination of th...

CVE-2025-54479: Out-of-bounds Write

When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2025-42328

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw exists in the Traffic Management Microkernel TMM of F5 BIG-IP. When a classification profile is configured on a virtual server lacking an HTTP or HTTP/2 profile, unspecified...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the IPsec module of BIG-IP, which can be exploited to cause the termination of the...

PT-2025-42319

Name of the Vulnerable Software and Affected Versions F5 BIG-IP SSL Orchestrator affected versions not specified Description When SSL Orchestrator is enabled, certain traffic can lead to the termination of the Traffic Management Microkernel TMM, resulting in a denial-of-service condition. This...

PT-2025-42326

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description An issue exists in F5 BIG-IP systems utilizing the embedded Packet Velocity Acceleration ePVA feature. Undisclosed traffic can lead to the termination of the Traffic Management...

PT-2025-42353

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An out-of-bounds read within the Traffic Management Microkernel TMM component can lead to a denial-of-service condition. This issue arises when a Datagram Transport Layer Security DTLS 1.2...

PT-2025-42373

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Traffic Management Microkernel TMM affected versions not specified Description Undisclosed traffic on a multi-bladed platform can cause the Traffic Management Microkernel TMM to terminate. This issue affects systems with more than on...

F5 BIG-IPI and F5 SSL Orchestrator buffer error vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A memory corruption vulnerability exists in the Explicit Forward Proxy module of the BIG-IP SSL Orchestrator. The vulnerabilit...