Known vulnerabilities in BIG-IP 16.1.3.1

Software: BIG-IP
Version: 16.1.3.1
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 150
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 16.1.3.1 BIG-IP 16.1.3.1 is affected by 150 vulnerabilities: 2 critical, 7 high, 93 medium, 48 low Critical High Medium Low

Vulnerabilities (150)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131416 - Stack-based buffer overflow
CVE-2026-41956
CWE-121 Medium
No
No
17.1.3.1, 17.5.1.4 14.05.2026 SB2026051451
#VU131415 - Insufficient Resource Pool
CVE-2026-34019
CWE-410 Medium
No
No
17.1.3, 17.5.1 14.05.2026 SB2026051450
#VU131414 - Stack-based buffer overflow
CVE-2026-42919
CWE-121 Low
No
No
17.1.3.1, 17.5.1.4, 21.0.0.1 14.05.2026 SB2026051448
#VU131413 - Cross-Site Request Forgery (CSRF)
CVE-2026-40703
CWE-352 Medium
No
No
17.1.3.1, 17.5.1.4 14.05.2026 SB2026051448
#VU131412 - Missing Release of Resource after Effective Lifetime
CVE-2026-39455
CWE-772 Medium
No
No
17.1.3.2, 17.5.1.6, 21.0.0.2 14.05.2026 SB2026051447
#VU131411 - Buffer overflow
CVE-2026-40067
CWE-120 Medium
No
No
17.1.3.1, 17.5.1.4, 21.0.0.1 14.05.2026 SB2026051448
#VU131410 - Command injection
CVE-2026-41953
CWE-77 Low
No
No
17.1.3.2, 17.5.1.6, 21.0.0.2 14.05.2026 SB2026051447
#VU131409 - Allocation of Resources Without Limits or Throttling
CVE-2026-40423
CWE-770 Medium
No
No
17.1.3.2, 17.5.1.6, 21.0.0.2 14.05.2026 SB2026051446
#VU131408 - Improper Access Control
CVE-2026-40631
CWE-284 Low
No
No
17.1.3.2, 17.5.1.6, 21.0.0.2 14.05.2026 SB2026051445
#VU131407 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-42924
CWE-78 Low
No
No
17.1.3.1, 17.5.1.4, 21.0.0.1 14.05.2026 SB2026051444
#VU131406 - Access of Uninitialized Pointer
CVE-2026-39458
CWE-824 Medium
No
No
17.1.3.2, 17.5.1.6, 21.0.0.1 14.05.2026 SB2026051442
#VU131405 - Unprotected Alternate Channel
CVE-2026-40435
CWE-420 Medium
No
No
17.1.3.1, 17.5.1.4 14.05.2026 SB2026051441
#VU131404 - Unchecked Return Value
CVE-2026-40060
CWE-252 Medium
No
No
17.1.3.1, 17.5.1.4, 21.0.0.1 14.05.2026 SB2026051440
#VU131403 - Cleartext Storage of Sensitive Information
CVE-2026-42408
CWE-312 Low
No
No
17.1.3.1, 17.5.1.4 14.05.2026 SB2026051439
#VU131400 - Use After Free
CVE-2026-41218
CWE-416 Medium
No
No
17.1.3.1, 17.5.1.4, 21.0.0.1 14.05.2026 SB2026051433
#VU131399 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42920
CWE-835 Medium
No
No
17.1.3.1, 17.5.1.4, 21.0.0.1 14.05.2026 SB2026051432
#VU131397 - Execution with Unnecessary Privileges
CVE-2026-32673
CWE-250 Low
No
No
17.1.3.2, 17.5.1.6, 21.0.0.2 14.05.2026 SB2026051431
#VU131396 - Allocation of Resources Without Limits or Throttling
CVE-2026-40629
CWE-770 Medium
No
No
17.1.3.1, 17.5.1.4 14.05.2026 SB2026051430
#VU131395 - Information Exposure Through Log Files
CVE-2026-41219
CWE-532 Low
No
No
17.1.3.1, 17.5.1.4 14.05.2026 SB2026051428
#VU131394 - Incorrect Calculation of Buffer Size
CVE-2026-40618
CWE-131 Medium
No
No
17.1.3.1, 17.5.1.4, 21.0.0.1 14.05.2026 SB2026051425
SB2026051426
SB2026051427


Showing elements 1 - 20 out of 150