Known vulnerabilities in BIG-IP
Vendor:
F5 Networks
Software:
BIG-IP
Software CPE:
cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
380
Public exploits:
33
Known exploited (KEV):
9
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
17.5.1.7
17.1.3.3
17.1.3.4
17.5.1.8
21.0.0.3
21.1.0.1
17.5.1.2
17.1.3.2
17.5.1.6
17.5.1.5
21.0.0.1
21.0.0.2
12.1.3.6
12.1.3.5
12.1.3.4
12.1.3.3
13.1.3.3
13.1.3.1
13.1.1.1
13.1.0.7
13.1.0.6
13.1.0.5
13.1.0.3
13.1.0.2
13.1.0.1
21.0.0
17.1.3.1
17.5.1.4
16.1.6.1
17.1.3
17.5.1.3
15.1.10.8
17.5.1.1
16.1.6.0.27.3
17.1.2.2.0.259.12
17.5.1.0.80.7
17.5.1
15.1.10.7
16.1.6
17.1.2.2
17.5.0
16.1.5.1
15.1.10.6
16.1.5.2
17.1.2.1
15.1.10.6.0.11.6
15.1.10.6.0.11
16.1.5.2.0.7.5
17.1.2
20.3.0
15.1.10.5
17.1.1.4
20.2.1
20.2.0
20.1.0
20.0.2
20.0.1
14.1.4.1
14.1.2.2
14.1.0.6
14.1.0.5
14.1.0.4
14.1.0.3
14.1.0.2
14.1.0.1
16.1.3.4
15.1.8.2
15.1.0.3
16.1.5
17.1.0.1
15.1.10.4
15.1.10.3
15.1.10.1
16.1.4.3
16.1.4.2
17.1.1.3
17.1.1.2
17.1.1.1
17.1.1
13.1.5.1 + hotfix-bigip-13.1.5.1.0.20.2-eng3
14.1.5.6 + hotfix-bigip-14.1.5.6.0.10.6-eng3
15.1.10.2 + hotfix-bigip-15.1.10.2.0.44.2-eng3
16.1.4.1 + hotfix-bigip-16.1.4.1.0.50.5-eng3
17.1.0.3 + hotfix-bigip-17.1.0.3.0.75.4-eng3
16.1.4
15.1.10
15.1.9
17.1.0.3
16.1.4.1
15.1.10.2
14.1.5.6
14.1.5.5
15.1.9.1
16.1.3.5
17.1.0.2
17.1.0
16.1.3.2
14.1.5.2
14.1.5.3
15.1.8.1
16.1.3.3
17.0.0.2
15.1.8
15.1.7
17.0.0.1
14.1.5.1
15.1.6.1
16.1.3.1
14.1.5
15.1.6
16.1.3
17.0.0
16.1.2.2
13.1.5
14.1.4.6
15.1.5.1
15.1.5
16.1.2.1
14.1.4.5
15.1.4.1
14.1.4.4
16.1.2
16.1.1
15.1.4
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
16.1.0
13.1.0.8
14.1.4.2
12.1.6
13.1.4
15.1.3
14.1.4.0.120.11
16.0.1.1.9.6
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
14.1.3
16.0.1
15.1.2
15.1.1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2.5
14.1.2-0.89.37
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
14.1.1
12.1.5.1
Hotfix-BIGIP-14.1.0.2.0.62.4-ENG
Hotfix-BIGIP-14.1.0.2.0.45.4-ENG
Hotfix-BIGIP-11.5.4.2.74.291-HF2
Hotfix-BIGIP-12.1.4.1.0.97.6-ENG
Hotfix-BIGIP-14.1.2.1.0.83.4-ENG
11.6.5.1
15.0.1.1
14.1.2.1
14.0.1.1
13.1.3.2
14.1.2.3
15.1.0
11.5.10
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
11.5.7
11.5.8
11.5.9
11.6.4
11.6.5
12.1.4
12.1.5
13.1.3
14.0.1
14.1.0
14.1.2
15.0.0
15.0.1
14.0.0.3
13.1.1
14.0.0
13.1.1.2
12.1.3.7
13.0.0 HF1
12.1.2 HF1
13.0.0
13.1.0
13.1.0.4
13.0.1
12.1.3.2
12.1.3.1
12.1.3.0
12.1.3
11.6.3.2
11.6.3.1
11.6.3
11.6.2
11.5.6
11.5.5
9.1.0 cr69440
9.1.0
12.1.1 HF2
12.1.1 HF1
12.1.0 HF2
12.1.0 HF1
12.0.0 HF4
12.0.0 HF3
12.0.0 HF2
12.0.0 HF1
11.6.1 HF1
11.6.0 HF8
11.6.0 HF7
11.6.0 HF6
11.6.0 HF5
11.6.0 HF4
11.6.0 HF3
11.6.0 HF2
11.6.0 HF1
11.5.4 HF2
11.5.4 HF1
11.5.3 HF2
11.5.3 HF1
11.5.2 HF1
11.5.1 HF11
11.5.1 HF10
11.5.1 HF9
11.5.1 HF8
11.5.1 HF7
11.5.1 HF6
11.5.1 HF5
11.5.1 HF4
11.5.1 HF3
11.5.1 HF2
11.5.1 HF1
11.5.0 HF7
11.5.0 HF6
11.5.0 HF5
11.5.0 HF4
11.5.0 HF3
11.5.0 HF2
11.5.0 HF1
11.4.1 HF11
11.4.1 HF10
11.4.1 HF9
11.4.1 HF8
11.4.1 HF7
11.4.1 HF6
11.4.1 HF5
11.4.1 HF4
11.4.1 HF3
11.4.1 HF2
11.4.1 HF1
11.4.0 HF10
11.4.0 HF9
11.4.0 HF8
11.4.0 HF7
11.4.0 HF6
11.4.0 HF5
11.4.0 HF4
11.4.0 HF3
11.4.0 HF2
11.4.0 HF1
11.3.0 HF10
11.3.0 HF9
11.3.0 HF8
11.3.0 HF7
11.3.0 HF6
11.3.0 HF5
11.3.0 HF4
11.3.0 HF3
11.3.0 HF2
11.3.0 HF1
11.2.1 HF16
11.2.1 HF15
11.2.1 HF14
11.2.1 HF13
11.2.1 HF12
11.2.1 HF11
11.2.1 HF10
11.2.1 HF9
11.2.1 HF8
11.2.1 HF7
11.2.1 HF6
11.2.1 HF5
11.2.1 HF4
11.2.1 HF3
11.2.1 HF2
11.2.1 HF1
11.2.0 HF7
11.2.0 HF6
11.2.0 HF5
11.2.0 HF4
11.2.0 HF3
11.2.0 HF2
11.2.0 HF1
11.1.0 HF10
11.1.0 HF9
11.1.0 HF8
11.1.0 HF7
11.1.0 HF6
11.1.0 HF5
11.1.0 HF4
11.1.0 HF3
11.1.0 HF2
11.1.0 HF1
11.0.0 HF5
11.0.0 HF4
11.0.0 HF3
11.0.0 HF2
11.0.0 HF1
10.2.4 HF13
10.2.4 HF12
10.2.4 HF11
10.2.4 HF10
10.2.4 HF9
10.2.4 HF8
10.2.4 HF7
10.2.4 HF6
10.2.4 HF5
10.2.4 HF4
10.2.4 HF3
10.2.4 HF2
10.2.4 HF1
10.2.3 HF1
10.2.2 HF4
10.2.2 HF3
10.2.2 HF2
10.2.2 HF1
10.2.1 HF3
10.2.1 HF2
10.2.1 HF1
10.2.0 HF2
10.2.0 HF1
10.0.1 HF4
10.0.1 HF3
10.0.1 HF2
10.0.1 HF1
10.0.0 HF3
10.0.0 HF2
10.0.0 HF1
9.4.8 HF6
9.4.8 HF5
9.4.8 HF4
9.4.8 HF3
9.4.8 HF2
9.4.8 HF1
9.4.7 HF2
9.4.7 HF1
9.4.6 HF3
9.4.6 HF2
9.4.6 HF1
9.4.5 HF3
9.4.5 HF2
9.4.5 HF1
9.4.3 HF4
9.4.3 HF3
9.4.3 HF2
9.4.3 HF1
9.4.1 HF2
9.4.1 HF1
9.4.0 HF4
9.4.0 HF3
9.4.0 HF2
9.4.0 HF1
9.3.1 HF8
9.3.1 HF7
9.3.1 HF6
9.3.1 HF5
9.3.1 HF4
9.3.1 HF3
9.3.1 HF2
9.3.1 HF1
9.3.0 HF3
9.3.0 HF2
9.3.0 HF1
9.1.3 HF1
9.1.2 HF8
9.1.2 HF7
9.1.2 HF6
9.1.2 HF5
9.1.2 HF4
9.1.2 HF3
9.1.2 HF2
9.1.2 HF1
9.1.1 r69440
12.1.2
12.1.1
11.4.1
11.4.0
11.3.0
11.2.1
11.2.0
11.1.0
11.0.0
10.2.4
10.2.3
10.2.2
10.2.1
10.2.0
10.1.0
10.0.1
10.0.0
9.6.1
9.4.8
9.4.7
9.4.6
9.4.5
9.4.4
9.4.3
9.4.2
9.4.1
9.4.0
9.3.1
9.3.0
9.1.3
9.1.2
9.1.1
11.5.1
11.5.0
11.5.4
11.5.3
11.5.2
11.6.0
11.6.1
12.0.0
12.1.0
Vulnerabilities (380)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137848 - Allocation of Resources Without Limits or Throttling CVE-2026-59762 |
CWE-770 | Medium | 17.1.3.4, 17.5.1.8, 21.0.0.3, 21.1.0.1 | 16.07.2026 |
SB2026071607 |
||
| #VU131416 - Stack-based buffer overflow CVE-2026-41956 |
CWE-121 | Medium | 17.1.3.1, 17.5.1.4 | 14.05.2026 |
SB2026051451 |
||
| #VU131415 - Insufficient Resource Pool CVE-2026-34019 |
CWE-410 | Medium | 17.1.3, 17.5.1 | 14.05.2026 |
SB2026051450 |
||
| #VU131414 - Stack-based buffer overflow CVE-2026-42919 |
CWE-121 | Low | 17.1.3.1, 17.5.1.4, 21.0.0.1 | 14.05.2026 |
SB2026051448 |
||
| #VU131413 - Cross-Site Request Forgery (CSRF) CVE-2026-40703 |
CWE-352 | Medium | 17.1.3.1, 17.5.1.4 | 14.05.2026 |
SB2026051448 |
||
| #VU131412 - Missing Release of Resource after Effective Lifetime CVE-2026-39455 |
CWE-772 | Medium | 17.1.3.2, 17.5.1.6, 21.0.0.2 | 14.05.2026 |
SB2026051447 |
||
| #VU131411 - Buffer overflow CVE-2026-40067 |
CWE-120 | Medium | 17.1.3.1, 17.5.1.4, 21.0.0.1 | 14.05.2026 |
SB2026051448 |
||
| #VU131410 - Command injection CVE-2026-41953 |
CWE-77 | Low | 17.1.3.2, 17.5.1.6, 21.0.0.2 | 14.05.2026 |
SB2026051447 |
||
| #VU131409 - Allocation of Resources Without Limits or Throttling CVE-2026-40423 |
CWE-770 | Medium | 17.1.3.2, 17.5.1.6, 21.0.0.2 | 14.05.2026 |
SB2026051446 |
||
| #VU131408 - Improper Access Control CVE-2026-40631 |
CWE-284 | Low | 17.1.3.2, 17.5.1.6, 21.0.0.2 | 14.05.2026 |
SB2026051445 |
||
| #VU131407 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-42924 |
CWE-78 | Low | 17.1.3.1, 17.5.1.4, 21.0.0.1 | 14.05.2026 |
SB2026051444 |
||
| #VU131406 - Access of Uninitialized Pointer CVE-2026-39458 |
CWE-824 | Medium | 17.1.3.2, 17.5.1.6, 21.0.0.1 | 14.05.2026 |
SB2026051442 |
||
| #VU131405 - Unprotected Alternate Channel CVE-2026-40435 |
CWE-420 | Medium | 17.1.3.1, 17.5.1.4 | 14.05.2026 |
SB2026051441 |
||
| #VU131404 - Unchecked Return Value CVE-2026-40060 |
CWE-252 | Medium | 17.1.3.1, 17.5.1.4, 21.0.0.1 | 14.05.2026 |
SB2026051440 |
||
| #VU131403 - Cleartext Storage of Sensitive Information CVE-2026-42408 |
CWE-312 | Low | 17.1.3.1, 17.5.1.4 | 14.05.2026 |
SB2026051439 |
||
| #VU131402 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-42780 |
CWE-22 | Low | 17.1.3.1, 17.5.1.4, 21.0.0.1 | 14.05.2026 |
SB2026051438 |
||
| #VU131400 - Use After Free CVE-2026-41218 |
CWE-416 | Medium | 17.1.3.1, 17.5.1.4, 21.0.0.1 | 14.05.2026 |
SB2026051433 |
||
| #VU131399 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-42920 |
CWE-835 | Medium | 17.1.3.1, 17.5.1.4, 21.0.0.1 | 14.05.2026 |
SB2026051432 |
||
| #VU131397 - Execution with Unnecessary Privileges CVE-2026-32673 |
CWE-250 | Low | 17.1.3.2, 17.5.1.6, 21.0.0.2 | 14.05.2026 |
SB2026051431 |
||
| #VU131396 - Allocation of Resources Without Limits or Throttling CVE-2026-40629 |
CWE-770 | Medium | 17.1.3.1, 17.5.1.4 | 14.05.2026 |
SB2026051430 |
Showing elements 1 - 20 out of 380