BI
Network Security
BIG-IP
On CISA KEVExploited in the wildRansomware-linked
79
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 40Medium 24Low 2
Watch
Add BIG-IP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24464 | 6.8 | May 13 | Appliance mode iControl REST vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-42919 | 6.7 | May 13 | F5 BIG-IP Appliance Mode Vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2022-33962 | 6.7 | Aug 4 | BIG-IP iRule vulnerability CVE-2022-33962 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1; 17.0.x before 17.0.0.1 |
| CVE-2026-41959 | 6.5 | May 13 | iControl and tmsh REST vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-42937 | 6.5 | May 13 | iControl REST and tmsh vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-35062 | 6.5 | May 13 | iControl SOAP vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.1 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-42781 | 6.5 | May 13 | BIG-IP FastL4 virtual server vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1 |
| CVE-2026-40699 | 6.5 | May 13 | BIG-IP Configuration utility vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-41219 | 6.5 | May 13 | BIG-IP QKView vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-40462 | 6.5 | May 13 | iControl REST and tmsh vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2022-41770 | 6.5 | Oct 19 | BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770 Affected: 17.0.x before 17.0.0.1; 16.1.x before 16.1.3.1; 15.1.x before 15.1.7; 14.1.x before 14.1.5.1; 13.1.0 before 13.1.x* |
| CVE-2022-34851 | 6.5 | Aug 4 | BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1; 17.0.x before 17.0.0.1 |
| CVE-2022-35272 | 5.5 | Aug 4 | BIG-IP HTTP MRF vulnerability CVE-2022-35272 Affected: 16.1.x before 16.1.3.1; 17.0.x before 17.0.0.1 |
| CVE-2026-40703 | 5.4 | May 13 | BIG-IP Configuration utility CSRF vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-34019 | 5.3 | May 13 | BIG-IP BFD vulnerability Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3; 16.1.0 |
| CVE-2026-40435 | 5.3 | May 13 | BIG-IP httpd access control vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-42063 | 4.9 | May 13 | iControl SOAP vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-42780 | 4.9 | May 13 | BIG-IP SSL Orchestrator vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.5; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-41954 | 4.9 | May 13 | iControl REST and tmsh vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2022-41694 | 4.9 | Oct 19 | BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694 Affected: 16.1.x before 16.1.3; 15.1.x before 15.1.6.1; 14.1.x before 14.1.5; 13.1.0 before 13.1.x* |
| CVE-2022-33968 | 4.9 | Aug 4 | BIG-IP LTM and APM NTLM vulnerability CVE-2022-33968 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1; 17.0.x before 17.0.0.1 |
| CVE-2026-42408 | 4.4 | May 13 | BIG-IP DNS tmsh vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-28758 | 4.4 | May 13 | BIG-IP iControl REST vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-42058 | 4.3 | May 13 | BIG-IP iControl REST vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
Showing 24