Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

BIG-IP — Vulnerabilities & Security Advisories 372

All 372 CVE vulnerabilities found in BIG-IP, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations associated with the BIG-IP product family manufactured by F5 Networks, specifically focusing on the vulnerability aggregation for this specific software platform. It collects a comprehensive dataset of security flaws, ranging from critical remote code execution risks to lower-severity configuration errors and information disclosure issues, covering advisory releases from January 2010 through December 2023. Visitors can utilize this resource to track a vendor's historical advisory patterns, understand the prevalence and evolution of specific weakness classes within the BIG-IP ecosystem, and look up a product's detailed vulnerability history to assess long-term risk exposure. By aggregating these entries, the page provides a centralized view of how security issues have been identified, remediated, or left unpatched over time, allowing security professionals to identify trends and recurring failure modes in F5's development lifecycle. This consolidated data supports informed decision-making for patch management, threat modeling, and compliance auditing, enabling teams to prioritize remediation efforts based on the severity and age of known weaknesses. The information presented is derived from official vendor notifications, independent security research reports, and industry databases, ensuring a broad perspective on the security posture of BIG-IP systems across various release versions.

Vendor: F5 Networks, Inc.

CVE ID Title CVSS Severity Published
CVE-2026-94127 BIG-IP APM OAuth vulnerability CWE-122 9.8 Critical 2026-09-22
CVE-2026-66842 BIG-IP and BIG-IQ Configuration utility vulnerability CWE-918 8.8 High 2026-09-02
CVE-2026-63020 BIG-IP Configuration utility vulnerability CWE-451 3.1 Low 2026-09-02
CVE-2026-59762 BIG-IP HTTP/2 vulnerability CWE-770 7.5 High 2026-07-15
CVE-2026-24464 Appliance mode iControl REST vulnerability CWE-35 6.8 Medium 2026-05-13
CVE-2026-42930 Appliance mode iControl REST vulnerability CWE-35 8.7 High 2026-05-13
CVE-2026-40423 BIG-IP SIP profile vulnerability CWE-770 7.5 High 2026-05-13
CVE-2026-41959 iControl and tmsh REST vulnerability CWE-732 6.5 Medium 2026-05-13
CVE-2026-39458 BIG-IP DNS Cache vulnerability CWE-824 7.5 High 2026-05-13
CVE-2026-42406 BIG-IP and BIG-IQ privilege escalation vulnerability CWE-267 6.5 Medium 2026-05-13
CVE-2026-42058 BIG-IP iControl REST vulnerability CWE-732 4.3 Medium 2026-05-13
CVE-2026-32643 BIG-IP and BIG-IQ privilege escalation vulnerability CWE-250 6.5 Medium 2026-05-13
CVE-2026-39455 BIG-IP Configuration utility vulnerability CWE-772 7.5 High 2026-05-13
CVE-2026-42937 iControl REST and tmsh vulnerability CWE-732 5.5 Medium 2026-05-13
CVE-2026-41217 BIG-IP tmsh vulnerability CWE-732 7.9 High 2026-05-13
CVE-2026-34176 Knowledge Appliance mode iControl REST vulnerability CWE-78 8.7 High 2026-05-13
CVE-2026-32673 BIG-IP scripted monitor vulnerability CWE-250 8.7 High 2026-05-13
CVE-2026-41225 iControl REST vulnerability CWE-648 9.1 Critical 2026-05-13
CVE-2026-39459 iControl REST and tmsh vulnerability CWE-272 7.2 High 2026-05-13
CVE-2026-42063 iControl SOAP vulnerability CWE-552 4.9 Medium 2026-05-13
CVE-2026-41953 BIG-IP Privilege Escalation vulnerability CWE-77 6.5 Medium 2026-05-13
CVE-2026-40698 iControl REST and TMSH vulnerability CWE-77 6.5 Medium 2026-05-13
CVE-2026-40631 BIG-IP iControl SOAP vulnerability CWE-552 6.5 Medium 2026-05-13
CVE-2026-40060 BIG-IP Advanced WAF and ASM vulnerability CWE-252 7.5 High 2026-05-13
CVE-2026-42924 BIG-IP iControl SOAP vulnerability CWE-78 6.5 Medium 2026-05-13
CVE-2026-40061 iControl REST and tmsh vulnerability CWE-77 8.7 High 2026-05-13
CVE-2026-41227 BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability CWE-770 7.5 High 2026-05-13
CVE-2026-42409 BIG-IP HTTP/2 vulnerability CWE-476 7.5 High 2026-05-13
CVE-2026-35062 iControl SOAP vulnerability CWE-266 6.5 Medium 2026-05-13
CVE-2026-40618 BIG-IP SSL/TLS vulnerability CWE-131 7.5 High 2026-05-13

All 372 known CVE vulnerabilities affecting BIG-IP with full Chinese analysis, references, and POCs where available.