Login Request a demo
BI
Network Security
BIG-IP
by F5 · last CVE Sep 22, 2026
On CISA KEVExploited in the wildRansomware-linked
79
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities79In the news11Timeline
Severity mix
Critical 10High 40Medium 24Low 2
Severity
All severities79Critical10High40Medium24Low2
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add BIG-IP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24464
6.8
1%
May 13
Appliance mode iControl REST vulnerability
Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0
CVE-2026-42919
6.7
0%
May 13
F5 BIG-IP Appliance Mode Vulnerability
Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2022-33962
6.7
0%
Aug 4
BIG-IP iRule vulnerability CVE-2022-33962
Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1; 17.0.x before 17.0.0.1
CVE-2026-41959
6.5
0%
May 13
iControl and tmsh REST vulnerability
Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0
CVE-2026-42937
6.5
0%
May 13
iControl REST and tmsh vulnerability
Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0
CVE-2026-35062
6.5
0%
May 13
iControl SOAP vulnerability
Affected: 21.0.0 before 21.0.0.1; 17.5.1 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2026-42781
6.5
0%
May 13
BIG-IP FastL4 virtual server vulnerability
Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1
CVE-2026-40699
6.5
0%
May 13
BIG-IP Configuration utility vulnerability
Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2026-41219
6.5
0%
May 13
BIG-IP QKView vulnerability
Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2026-40462
6.5
0%
May 13
iControl REST and tmsh vulnerability
Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2022-41770
6.5
1%
Oct 19
BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770
Affected: 17.0.x before 17.0.0.1; 16.1.x before 16.1.3.1; 15.1.x before 15.1.7; 14.1.x before 14.1.5.1; 13.1.0 before 13.1.x*
CVE-2022-34851
6.5
1%
Aug 4
BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851
Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1; 17.0.x before 17.0.0.1
CVE-2022-35272
5.5
0%
Aug 4
BIG-IP HTTP MRF vulnerability CVE-2022-35272
Affected: 16.1.x before 16.1.3.1; 17.0.x before 17.0.0.1
CVE-2026-40703
5.4
0%
May 13
BIG-IP Configuration utility CSRF vulnerability
Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2026-34019
5.3
0%
May 13
BIG-IP BFD vulnerability
Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3; 16.1.0
CVE-2026-40435
5.3
0%
May 13
BIG-IP httpd access control vulnerability
Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2026-42063
4.9
0%
May 13
iControl SOAP vulnerability
Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0
CVE-2026-42780
4.9
1%
May 13
BIG-IP SSL Orchestrator vulnerability
Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.5; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2026-41954
4.9
0%
May 13
iControl REST and tmsh vulnerability
Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2022-41694
4.9
1%
Oct 19
BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694
Affected: 16.1.x before 16.1.3; 15.1.x before 15.1.6.1; 14.1.x before 14.1.5; 13.1.0 before 13.1.x*
CVE-2022-33968
4.9
1%
Aug 4
BIG-IP LTM and APM NTLM vulnerability CVE-2022-33968
Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1; 17.0.x before 17.0.0.1
CVE-2026-42408
4.4
0%
May 13
BIG-IP DNS tmsh vulnerability
Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2026-28758
4.4
0%
May 13
BIG-IP iControl REST vulnerability
Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0
CVE-2026-42058
4.3
0%
May 13
BIG-IP iControl REST vulnerability
Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0
CVE-2022-41983
3.7
0%
Oct 19
BIG-IP TMM Vulnerability CVE-2022-41983
Affected: 16.1.x before 16.1.3.1; 15.1.x before 15.1.7; 14.1.x before 14.1.5.1; 13.1.0 before 13.1.x*
CVE-2026-63020
3.1
0%
Sep 2
BIG-IP Configuration utility vulnerability
Affected: 21.1.0 before 21.1.0.1; 21.0.0 before 21.0.0.3; 17.5.0 before 17.5.1.8; 17.1.0 before 17.1.3.4
CVE-2014-9342
–
2%
Dec 8
Cross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Application Security Manager (ASM) in F5 BIG-IP 11.3.0 allows remote attackers to inject…
Affected: 11.3.0
CVE-2008-7032
–
2%
Aug 24
Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of…
Affected: 9.4.3
CVE-2007-6258
–
41%
Feb 19
Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2)…
Affected: 9.2.3.30
Page 2 of 2 · 79 total
12