BI
Network Security
BIG-IP
On CISA KEVExploited in the wildRansomware-linked
79
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 40Medium 24Low 2
Watch
Add BIG-IP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-94127 In wildKEV | 9.8 | Sep 22 | BIG-IP APM OAuth vulnerability Affected: 21.1.0 before Hotfix-BIGIP-21.1.0.2.0.30.22-ENG; 17.5.0 before Hotfix-BIGIP-17.5.1.9.0.160.12-ENG; 17.1.0 before Hotfix-BIGIP-17.1.3.5.0.41.14-ENG |
| CVE-2025-53521 In wildKEV | 9.8 | Oct 15 | BigIP APM Vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2023-46747 RansomwareIn wildKEV | 9.8 | Oct 26 | BIG-IP Configuration utility unauthenticated remote code execution vulnerability Affected: 17.1.0; 16.1.0; 15.1.0; 14.1.0; 13.1.0 |
| CVE-2022-1388 RansomwareIn wildKEV | 9.8 | May 5 | F5 BIG-IP Missing Authentication Vulnerability Affected: 16.1.x before 16.1.2.2; 15.1.x before 15.1.5.1; 14.1.x before 14.1.4.6; 13.1.x before 13.1.5; 12.1.x through 12.1.6; 11.6.x through 11.6.5 |
| CVE-2021-22991 In wildKEV | 9.8 | Mar 31 | F5 BIG-IP Traffic Management Microkernel Buffer Overflow Affected: 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3 |
| CVE-2020-5902 RansomwareIn wildKEV | 9.8 | Jul 1 | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Affected: 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1 |
| CVE-2022-35728 | 9.8 | Aug 4 | iControl REST vulnerability CVE-2022-35728 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1; 17.0.x before 17.0.0.1 |
| CVE-2026-41225 | 9.1 | May 13 | iControl REST vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2022-35243 | 9.1 | Aug 4 | Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5; 15.1.x before 15.1.5.1; 16.1.x before 16.1.3 |
| CVE-2022-34865 | 9.1 | Aug 4 | Traffic intelligence feeds vulnerability CVE-2022-34865 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5; 15.1.x before 15.1.6.1 |
Showing 10