BI
Network Security
BIG-IP
On CISA KEVExploited in the wildRansomware-linked
79
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 40Medium 24Low 2
Watch
Add BIG-IP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46748 In wildKEV | 8.8 | Oct 26 | BIG-IP Configuration utility authenticated SQL injection vulnerability Affected: 17.1.0; 16.1.0; 15.1.0; 14.1.0; 13.1.0 |
| CVE-2026-66842 | 8.8 | Sep 2 | BIG-IP and BIG-IQ Configuration utility vulnerability Affected: 21.1.0 before 21.1.0.1; 21.0.0 before 21.0.0.3; 17.5.0 before 17.5.1.8; 17.1.0 before 17.1.3.4 |
| CVE-2026-41957 | 8.8 | May 13 | BIG-IP and BIG-IQ Configuration utility vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-42930 | 8.7 | May 13 | Appliance mode iControl REST vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-42406 | 8.7 | May 13 | BIG-IP and BIG-IQ privilege escalation vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-32643 | 8.7 | May 13 | BIG-IP and BIG-IQ privilege escalation vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-32673 | 8.7 | May 13 | BIG-IP scripted monitor vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-34176 | 8.7 | May 13 | Knowledge Appliance mode iControl REST vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-41953 | 8.7 | May 13 | BIG-IP Privilege Escalation vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-40631 | 8.7 | May 13 | BIG-IP iControl SOAP vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-40698 | 8.7 | May 13 | iControl REST and TMSH vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-42924 | 8.7 | May 13 | BIG-IP iControl SOAP vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-40061 | 8.7 | May 13 | iControl REST and tmsh vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-41217 | 7.9 | May 13 | BIG-IP tmsh vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-59762 | 7.5 | Jul 15 | BIG-IP HTTP/2 vulnerability Affected: 21.1.0 before 21.1.0.1; 21.0.0 before 21.0.0.3; 17.5.0 before 17.5.1.8; 17.1.0 before 17.1.3.4 |
| CVE-2026-40423 | 7.5 | May 13 | BIG-IP SIP profile vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-39458 | 7.5 | May 13 | BIG-IP DNS Cache vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-39455 | 7.5 | May 13 | BIG-IP Configuration utility vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-40060 | 7.5 | May 13 | BIG-IP Advanced WAF and ASM vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-42409 | 7.5 | May 13 | BIG-IP HTTP/2 vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-41227 | 7.5 | May 13 | BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-40618 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.1.5.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-41956 | 7.5 | May 13 | BIG-IP TMM Vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-42920 | 7.5 | May 13 | BIG-IP DTLS Vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-40629 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-41218 | 7.5 | May 13 | BIG-IP PEM iRules vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-40067 | 7.5 | May 13 | BIG-IP APM Vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2022-41833 | 7.5 | Oct 19 | BIG-IP iRule vulnerability CVE-2022-41833 Affected: 13.1.0 before 13.1.x* |
| CVE-2022-41832 | 7.5 | Oct 19 | BIG-IP SIP vulnerability CVE-2022-41832 Affected: 17.0.x before 17.0.0.1; 16.1.x before 16.1.3.1; 15.1.x before 15.1.6.1; 14.1.x before 14.1.5.1; 13.1.x before 13.1.5.1 |
| CVE-2022-41624 | 7.5 | Oct 19 | BIG-IP iRules vulnerability CVE-2022-41624 Affected: 17.0.x before 17.0.0.1; 16.1.x before 16.1.3.2; 15.1.x before 15.1.7; 14.1.x before 14.1.5.2; 13.1.x before 13.1.5.1 |
| CVE-2022-36795 | 7.5 | Oct 19 | BIG-IP software SYN cookies vulnerability CVE-2022-36795 Affected: 17.0.x before 17.0.0.1; 16.1.x before 16.1.3.1; 15.1.x before 15.1.7; 14.1.x before 14.1.5.1 |
| CVE-2022-35240 | 7.5 | Aug 4 | BIG-IP Message Routing MQTT vulnerability CVE-2022-35240 Affected: 14.1.x before 14.1.5; 15.1.x before 15.1.6.1; 16.1.x before 16.1.2.2 |
| CVE-2022-35236 | 7.5 | Aug 4 | HTTP2 profile vulnerability CVE-2022-35236 Affected: 14.1.x before 14.1.5; 15.1.x before 15.1.6.1; 16.1.x before 16.1.2.2 |
| CVE-2022-34862 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-34862 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1 |
| CVE-2022-34844 | 7.5 | Aug 4 | BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844 Affected: 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1 |
| CVE-2022-34655 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-34655 Affected: 14.1.x before 14.1.5; 15.1.x before 15.1.6.1; 16.0.x before 16.0.1.1 |
| CVE-2022-34651 | 7.5 | Aug 4 | BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651 Affected: 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1 |
| CVE-2022-32455 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-32455 Affected: 13.1.0; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2 |
| CVE-2026-39459 | 7.2 | May 13 | iControl REST and tmsh vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2022-35735 | 7.2 | Aug 4 | BIG-IP monitor configuration vulnerability CVE-2022-35735 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1 |
Showing 40