BN
Product
Big-ip Next Cloud-native Network Functions
27
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 23Medium 4Low 0
Watch
Add Big-ip Next Cloud-native Network Functions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59762 | 7.5 | Jul 15 | BIG-IP HTTP/2 vulnerability Affected: 1.1.0 before 1.4.3; 2.0.0 before 2.2.3; 2.3.0 |
| CVE-2026-42409 | 7.5 | May 13 | BIG-IP HTTP/2 vulnerability Affected: 1.1.0 through 1.4.0; 2.0.0 through 2.0.2 |
| CVE-2026-40618 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 1.1.0 through 1.4.1; 2.0.0 through 2.2.1 |
| CVE-2026-41956 | 7.5 | May 13 | BIG-IP TMM Vulnerability Affected: 2.0.0 through 2.0.2; 1.4.0 |
| CVE-2026-40629 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 2.0.0 through 2.0.2; 1.4.0 |
| CVE-2025-61990 | 7.5 | Oct 15 | When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which… Affected: 1.1.0 through 1.4.0; 2.0.0 through 2.1.0 |
| CVE-2025-58071 | 7.5 | Oct 15 | When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End… Affected: 1.1.0 through 1.4.1; 2.0.0 through 2.1.0 |
| CVE-2025-61974 | 7.5 | Oct 15 | When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached… Affected: 1.1.0 through 1.4.1; 2.0.0 through 2.1.0 |
| CVE-2025-60016 | 7.5 | Oct 15 | When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a… Affected: 1.1.0 before 1.4.0 |
| CVE-2025-59781 | 7.5 | Oct 15 | When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization. Note: Software versions… Affected: 1.1.0 through 1.4.0 |
| CVE-2025-58120 | 7.5 | Oct 15 | When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of… Affected: 1.1.0 through 1.4.1; 2.0.0 |
| CVE-2025-54479 | 7.5 | Oct 15 | When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel (TMM) to… Affected: 1.1.0 through 1.4.0; 2.0.0; 2.0.1; 2.0.2; 2.1.0 |
| CVE-2025-48008 | 7.5 | Oct 15 | When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the… Affected: 1.1.0 through 1.4.1 |
| CVE-2025-46706 | 7.5 | Oct 15 | When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software… Affected: 1.1.0 through 1.4.1 |
| CVE-2025-41414 | 7.5 | May 7 | When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of… Affected: 1.1.0 before 1.4.0 |
| CVE-2025-41399 | 7.5 | May 7 | When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note:… Affected: 1.1.0 before 1.3.0 |
| CVE-2025-36557 | 7.5 | May 7 | When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to… Affected: 1.1.0 before 1.4.0 |
| CVE-2025-36504 | 7.5 | May 7 | When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions… Affected: 1.1.0 through 1.4.1 |
| CVE-2025-24312 | 7.5 | Feb 5 | When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server or firewall rule or policy, undisclosed traffic can cause… Affected: 1.1.0 before 1.4.0 |
| CVE-2024-41164 | 7.5 | Aug 14 | When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to… Affected: 1.1.0 before 1.2.0 |
| CVE-2024-25560 | 7.5 | May 8 | When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate Affected: 1.1.0 before 1.2.0 |
| CVE-2023-45886 | 7.5 | Nov 21 | The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed… Affected: 1.1.0 through 1.1.1 |
| CVE-2024-23306 | 7.1 | Feb 14 | A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files. Note: Software versions which have reached End of Technical… Affected: 1.1.0 before 1.2.0 |
| CVE-2025-55670 | 6.5 | Oct 15 | On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes systems, repeated undisclosed API calls can cause the Traffic Management Microkernel (TMM) to terminate. Note:… Affected: 1.1.0 through 1.4.1 |
| CVE-2025-54805 | 6.5 | Oct 15 | When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in the Traffic Management Microkernel… Affected: 1.1.0 through 1.4.1 |
| CVE-2025-54500 | 5.3 | Aug 13 | An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset… Affected: 1.1.0 through 1.4.1; 2.0.0 through 2.0.2 |
| CVE-2024-28132 | 4.4 | May 8 | Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note:… Affected: 1.2.0 before 1.3.0 |
Showing 27