BN
Product
Big-ip Next Service Proxy For Kubernetes
On CISA KEVExploited in the wild
24
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 20Medium 4Low 0
Watch
Add Big-ip Next Service Proxy For Kubernetes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44487 In wildKEV | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability Affected: 1.5.0 through 1.8.2 |
| CVE-2026-59762 | 7.5 | Jul 15 | BIG-IP HTTP/2 vulnerability Affected: 1.7.0 before 1.7.18; 1.8.0 through 1.9.2; 2.0.0 through 2.0.3 |
| CVE-2026-40618 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 1.7.0 through 1.9.2; 2.0.0 through 2.0.3 |
| CVE-2026-40629 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 1.7.0 through 1.7.15; 2.0.0 through 2.0.2 |
| CVE-2025-61990 | 7.5 | Oct 15 | When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which… Affected: 1.7.0 through 1.9.2; 2.0.0 through 2.0.2 |
| CVE-2025-61974 | 7.5 | Oct 15 | When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached… Affected: 1.7.0 through 1.9.2; 2.0.0 through 2.0.2 |
| CVE-2025-60016 | 7.5 | Oct 15 | When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a… Affected: 1.7.0 through 1.9.2 |
| CVE-2025-58120 | 7.5 | Oct 15 | When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of… Affected: 1.7.0 before 1.7.14; 1.7.14; 2.0.0 |
| CVE-2025-48008 | 7.5 | Oct 15 | When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the… Affected: 1.7.0 through 1.9.2 |
| CVE-2025-46706 | 7.5 | Oct 15 | When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software… Affected: 1.7.0 through 1.9.2 |
| CVE-2025-41414 | 7.5 | May 7 | When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of… Affected: 1.7.0 before 1.7.9; 1.8.0 through 1.9.2 |
| CVE-2025-41399 | 7.5 | May 7 | When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note:… Affected: 1.7.0 before 1.7.12; 1.8.0 through 1.9.2 |
| CVE-2025-36557 | 7.5 | May 7 | When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to… Affected: 1.7.0 before 1.7.9; 1.8.0 through 1.9.2 |
| CVE-2025-36504 | 7.5 | May 7 | When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions… Affected: 1.7.0 through 1.9.2 |
| CVE-2025-22846 | 7.5 | Feb 5 | When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to… Affected: 1.7.0 before 1.7.7; 1.8.0; 1.8.1; 1.8.2; 1.9.0 |
| CVE-2024-41164 | 7.5 | Aug 14 | When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to… Affected: 1.7.0 before 1.9.0 |
| CVE-2024-23314 | 7.5 | Feb 14 | When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions… Affected: 1.5.0 before 1.8.1 |
| CVE-2023-45886 | 7.5 | Nov 21 | The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed… Affected: 1.5.0 through 1.8.2 |
| CVE-2023-40534 | 7.5 | Oct 10 | When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated… Affected: 1.6.0 through 1.8.2 |
| CVE-2023-45226 | 7.4 | Oct 10 | The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow an attacker with the ability to… Affected: 1.5.0 |
| CVE-2025-55670 | 6.5 | Oct 15 | On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes systems, repeated undisclosed API calls can cause the Traffic Management Microkernel (TMM) to terminate. Note:… Affected: 1.7.0 through 1.9.2 |
| CVE-2025-54805 | 6.5 | Oct 15 | When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in the Traffic Management Microkernel… Affected: 1.7.0 through 1.9.2 |
| CVE-2025-54500 | 5.3 | Aug 13 | An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset… Affected: 1.7.0 through 1.9.2; 2.0.0 through 2.0.2 |
| CVE-2023-24594 | 5.3 | May 3 | When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization. Note: Software versions which… Affected: 1.5.0 |
Showing 24