CVE-2023-46747

CVE-2023-46747 is an unauthenticated remote code execution flaw in F5 BIG-IP TMUI (management port/self IP). Public linked PoCs/exploits demonstrate unauthenticated RCE by targeting TMUI to create or leverage a user/token flow and execute commands on vulnerable devices; CVSS v3.1 = 9.8 (CRITICAL)...

CVE-2023-46748

CVE-2023-46748 is an authenticated SQL injection vulnerability in F5 BIG-IP’s Configuration utility. An attacker with network access via the BIG-IP management port and/or self IPs can execute arbitrary system commands through the vulnerable Configuration utility. Affected BIG-IP versions include ...

CVE-2025-31644

CVE-2025-31644 affects BIG-IP in Appliance mode. An authenticated administrator can exploit command injection via iControl REST and the tmsh shell to execute arbitrary system commands, potentially gaining root access. The advisory K000148591 provides fixes for affected branches: upgrade to BIG-IP...

CVE-2025-20029

CVE-2025-20029 is a command-injection vulnerability in BIG-IP iControl REST and the tmsh shell. An authenticated user could execute arbitrary system commands, e.g., via a crafted HTTP POST to the iControl REST endpoint /mgmt/tm/util/bash with a JSON payload such as {"command": "id"}, potentially ...

CVE-2024-45844

CVE-2024-45844 affects F5 BIG-IP monitors vulnerability. The issue allows an authenticated attacker with Manager-level privileges (via Configuration utility or tmsh) to elevate privileges or modify configuration due to a monitor feature flaw. Affected BIG-IP versions and fixes: 15.1.x up to 15.1....

CVE-2026-40629

CVE-2026-40629 affects BIG-IP SSL/TLS when SSL profiles are configured on a virtual server. The issue can cause the virtual server to stop processing new client connections, effectively a DoS for new connections. The F5 advisory confirms this is a data plane issue; no control plane exposure. Miti...

CVE-2026-41225

CVE-2026-41225 affects F5 BIG-IP iControl REST. A highly privileged, authenticated user (Manager) can create configuration objects that execute arbitrary commands. Impact is control-plane–level: privilege escalation and possible cross-boundary access in appliances; data plane remains unaffected p...

CVE-2024-39778

CVE-2024-39778 affects BIG-IP platforms with High-Speed Bridge (HSB) where a stateless virtual server can be abused by undisclosed requests to cause TMM termination, causing DoS. Concrete details from connected sources show affected tracks per F5 advisories: BIG-IP Next (all modules) vulnerable; ...

CVE-2024-41727

CVE-2024-41727 affects BIG-IP TMM on BIG-IP devices (and BIG-IP VE with Intel E810 SR-IOV NIC) where undisclosed traffic can cause memory resource utilization to spike, degrading performance or causing DoS. Public details specify the vulnerable components as the Traffic Management Microkernel (TM...

CVE-2025-41414

Summary of CVE-2025-41414 (BIG-IP HTTP/2 vulnerability) Issue: When HTTP/2 client and server profiles are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate, resulting in DoS via traffic disruption as the TMM restarts. This is a da...

CVE-2025-21087

CVE-2025-21087 affects F5 BIG-IP TMM: when Client/Server SSL profiles are configured on a virtual server or DNSSEC signing is used, undisclosed traffic can cause increased memory and CPU usage, potentially degrading performance or causing DoS. According to the F5 advisory, vulnerable ranges inclu...

CVE-2026-34176

CVE-2026-34176 affects BIG-IP in Appliance mode and is described in F5 advisories K000160857/K000160857 (appliance-mode iControl REST vulnerability). An authenticated attacker with administrator privileges and network access can trigger an OS command injection via an undisclosed iControl REST end...

CVE-2024-31156

CVE-2024-31156 is an XSS vulnerability in the BIG-IP Configuration utility. A stored XSS flaw allows JavaScript execution in the context of the currently logged-in user via an undisclosed page. CVSSv3.1 base score 8.0 (HIGH) with Network attack vector, Low attack complexity, Privileges required: ...

CVE-2024-27202

CVE-2024-27202 is a DOM-based XSS in the BIG-IP Configuration utility. Affected BIG-IP versions include 17.1.0–17.1.1, 16.1.0–16.1.4, and 15.1.0–15.1.10. An attacker can run JavaScript in the context of an authenticated admin session via a malicious page, a control-plane issue with no data-plane ...

CVE-2025-24320

CVE-2025-24320 is a stored XSS vulnerability in the BIG-IP Configuration utility. It arises from an incomplete fix for CVE-2024-31156. Affected: BIG-IP Configuration utility (across multiple tracks/branches). Impact: allows an attacker to store and execute JavaScript in the context of the logged-...

CVE-2024-25560

CVE-2024-25560 affects F5 BIG-IP AFM/TMM: when a DNS profile is applied to a virtual server, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate, leading to DoS. The advisory K000139037 lists affected branches and fixes: BIG-IP (all modules) 17.x (17.1.0 vulner...

CVE-2025-21091

CVE-2025-21091 affects F5 BIG-IP SNMP when SNMPv1/v2c is disabled. The vulnerability can cause a DoS by increasing memory usage through undisclosed requests. According to the advisory, fixes are available in specific branches: for BIG-IP (all modules) the fix was introduced in 17.1.2 (vulnerable:...

CVE-2024-41164

CVE-2024-41164 affects BIG-IP when a TCP profile with Multipath TCP (MPTCP) is configured on a Virtual Server. Undisclosed traffic and conditions outside the attacker’s control can cause the Traffic Management Microkernel (TMM) to terminate, resulting in DoS. MODE C documents concrete details fro...

CVE-2024-28889

CVE-2024-28889 affects F5 BIG-IP SSL when an SSL profile with alert timeout is set to a non-default value, causing the Traffic Management Microkernel (TMM) to terminate and disrupt traffic (DoS). Affected branches and fixes per K000138912: BIG-IP (all modules) 17.1.0–17.1.1 vulnerable; fixed in 1...

CVE-2024-33608

CVE-2024-33608 affects F5 BIG-IP IPsec vulnerability. When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate, resulting in a DoS on the BIG-IP data plane. CVSS v3.1 score is 7.5 (NETWORK, LOW attack complexity, no user int...

CVE-2026-63020

CVE-2026-63020 is a CWE-451 (UI Misrepresentation of Critical Information) vulnerability in the BIG-IP Configuration utility web interface. An attacker can trick authenticated users into clicking malicious links, causing a spoofed error message to be reflected in the victim's browser session. Thi...

CVE-2026-42937

CVE-2026-42937 affects BIG-IP and BIG-IQ, with incorrect permission assignments in TMOS Shell (tmsh) for arp/ndp and in iControl REST. An authenticated attacker can view adjacent network information via remote iControl REST or local tmsh, a purely control-plane issue with no data-plane exposure. ...

CVE-2025-41433

CVE-2025-41433 affects F5 BIG-IP SIP MRF ALG profile. When configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate, enabling a potential DoS. Affected product scope per vendor advisories includes BIG-IP (all modules) acr...

CVE-2026-42409

CVE-2026-42409 affects BIG-IP: when an HTTP/2 profile is used with an iRule containing HTTP::redirect or HTTP::respond on a virtual server, undisclosed requests can crash the Traffic Management Microkernel (TMM), causing DoS. Evidence in connected docs shows affected products: BIG-IP (all modules...

CVE-2025-20058

CVE-2025-20058 affects BIG-IP: when a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can trigger increased memory usage, potentially degrading system performance and causing DoS via TMM. The F5 K000140947 advisory details affected branches and fixes: BIG-IP ...

CVE-2025-20045

CVE-2025-20045 affects F5 BIG-IP SIP ALG profile vulnerability where a SIP ALG Passthru Mode plus SIP router ALG on a Message Routing virtual server can cause Traffic Management Microkernel (TMM) termination, leading to DoS. The issue is documented across multiple sources (NVD, Red Hat, CVE listi...

CVE-2026-41957

CVE-2026-41957 affects the BIG-IP and BIG-IQ Configuration utility. The connected advisory confirms an authenticated remote code execution vulnerability via undisclosed vectors in the Configuration utility (control plane access), with CWE-502 deserialization noted in the security advisory details...

CVE-2025-36504

CVE-2025-36504 affects BIG-IP when an HTTP/2 httprouter profile is configured on a virtual server. The issue can cause undisclosed responses that lead to increased memory/resource utilization, potentially degrading performance and causing DoS-like impact on the BIG-IP system. Security advisory K0...

CVE-2025-41399

CVE-2025-41399 affects BIG-IP products when a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, causing undisclosed requests to increase memory resource utilization and potentially degrade performance or cause DoS via a reset/restart of the TMM process. The Re...

CVE-2026-40698

CVE-2026-40698 affects BIG-IP and BIG-IQ where a highly privileged, authenticated user (Resource Administrator) can create SNMP configuration objects via iControl REST or tmsh, enabling privilege escalation. The connected advisory documents concrete details on affected products/versions and the u...

CVE-2024-41723

CVE-2024-41723 affects BIG-IP iControl REST. A remote authenticated attacker with network access can view only usernames in the BIG-IP system via the iControl REST interface; there is no data plane exposure (control plane issue). Affected product versions are listed in F5 advisory: BIG-IP Next/ B...

CVE-2024-32761

CVE-2024-32761 affects BIG-IP TMM tenants on VELOS and rSeries. The issue is a data leakage in the TMM that can randomly expose up to 64 bytes of non-contiguous randomized data; under rare conditions it may trigger a TMM restart, impacting availability. Affected versions are 15.1.0 through 15.1.9...

CVE-2026-41956

CVE-2026-41956 affects BIG-IP TMM. When a classification profile is configured on a UDP virtual server, undisclosed requests can cause TMM termination, producing DoS on the BIG-IP data plane. From F5 advisories, vulnerable lines include BIG-IP (all modules) UDP virtual servers across 17.x and 21....

CVE-2024-33604

CVE-2024-33604 affects F5 BIG-IP Configuration Utility. A reflected XSS exists in an undisclosed page, enabling JavaScript execution in the context of the logged-in user (potentially escalating to admin if via Advanced Shell). Affected versions include 17.1.0–17.1.1, 16.1.0–16.1.4, and 15.1.0–15....

CVE-2026-39458

CVE-2026-39458 affects BIG-IP DNS when a DNS cache profile is enabled on a virtual server, causing the Traffic Management Microkernel (TMM) to terminate and disrupt traffic (DoS). Exploitation details are not provided in the documents. Affected/fixed status per F5 advisory: BIG-IP (all modules) 2...

CVE-2026-41953

CVE-2026-41953 affects BIG-IP systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can modify configuration objects, leading to privilege escalation. The vulnerability is a control plane issue with no data-plane exposure, and impact includes priv...

CVE-2026-40618

CVE-2026-40618 affects BIG-IP SSL/TLS when an SSL profile is on a virtual server and either QAT is not available (VE) or crypto.hwacceleration is disabled on hardware. This can cause TMM to terminate, resulting in a data-plane DoS with traffic disruption as TMM restarts. Affected BIG-IP lines inc...

CVE-2026-40631

CVE-2026-40631 affects BIG-IP iControl SOAP. An authenticated attacker with Resource Administrator or Administrator rights can modify configuration objects via iControl SOAP, leading to privilege escalation. In Appliance mode, exploitation may cross security boundaries; data plane is not exposed....

CVE-2026-39459

CVE-2026-39459 affects BIG-IP products via iControl REST and the TMOS Shell (tmsh). An authenticated attacker with at least the Manager role over the network can create configuration objects that enable execution of arbitrary commands on the system. The F5 advisory lists affected branches and vul...

CVE-2025-54500

CVE-2025-54500 describes an HTTP/2 implementation flaw that allows a DoS via malformed HTTP/2 control frames to break the max concurrent streams limit (the MadeYouReset attack). Affected products are F5 BIG-IP and BIG-IP Next families with multiple vulnerable branches; affected versions include B...

CVE-2026-42781

The CVE-2026-42781 issue affects BIG-IP with embedded ePVA acceleration enabled. A local network attacker can cause the ePVA/TMM to escalate resource utilization, degrading system performance and potentially causing DoS on vulnerable rSeries/VELOS deployments that support ePVA. That impact is a d...

CVE-2026-41219

Summary of CVE-2026-41219 (BIG-IP qkview): A low-privileged attacker can read sensitive information from a QKView file due to improper sanitization in the BIG-IP qkview utility. Affected branches include BIG-IP Next (SPK/CNF for all, with known vulnerable ranges) and BIG-IP (17.x, 16.x) as shown ...

CVE-2026-42406

CVE-2026-42406 affects BIG-IP and BIG-IQ. A highly privileged, authenticated user with at least the Certificate Manager role can modify configuration objects that enable running arbitrary commands, potentially executing system commands and creating/deleting files. On BIG-IP, exploitation may bypa...

CVE-2026-32643

CVE-2026-32643 affects BIG-IP and BIG-IQ. An authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands. Impact includes execution of system commands, file creation/deletion, and potential Appliance mode restrictions by...

CVE-2026-42063

Summary of CVE-2026-42063 (iControl SOAP vulnerability) : The vulnerability exists in iControl SOAP where an authenticated attacker with the Resource Administrator or Administrator role can download sensitive files. The F5 advisory details that this is a control-plane issue affecting the BIG-IP i...

CVE-2026-39455

CVE-2026-39455 affects the BIG-IP Configuration utility when LDAP authentication is used. Undisclosed traffic can cause the httpd process to exhaust file descriptors, leading to a denial‑of‑service where the Configuration utility stops responding until httpd is restarted. Exploitation: remote, un...

CVE-2026-40435

CVE-2026-40435 affects F5 BIG-IP httpd access control. When IP-based restrictions are configured, they do not cover all endpoints, potentially allowing connections from blocked addresses to the control plane HTTP services. Impact is a control-plane issue; exploitation requires valid credentials t...

CVE-2026-41217

The CVE-2026-41217 entry describes a vulnerability in an undisclosed BIG-IP TMOS Shell (tmsh) command that can allow an authenticated user with resource administrator or administrator role to execute arbitrary system commands with elevated privileges. In Appliance mode, a successful exploit can c...

CVE-2026-41959

CVE-2026-41959 affects BIG-IP/BIG-IQ TMOS Shell (tmsh) network diagnostics and iControl REST. Root cause: incorrect permission assignments allow an authenticated user to view destination systems’ network status. Impact: control-plane exposure (viewing network status) with no data-plane exposure; ...

CVE-2026-24464

CVE-2026-24464 is an Appliance mode vulnerability in iControl REST with directory traversal that, when exploited by an authenticated administrator, can delete files across a security boundary. The F5 advisory confirms this affects BIG-IP/iControl REST across multiple branches with varying vulnera...