Known vulnerabilities in BIG-IP Next CNF 1.4.0 EHF-3

Version: 1.4.0 EHF-3
Software CPE: cpe:2.3:o:f5_networks:big-ip_next_cnf:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP Next CNF version 1.4.0 EHF-3 BIG-IP Next CNF 1.4.0 EHF-3 is affected by 5 vulnerabilities: 4 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137848 - Allocation of Resources Without Limits or Throttling
CVE-2026-59762
CWE-770 Medium
No
No
1.4.3, 2.0.0, 2.2.3, 2.3.2 16.07.2026 SB2026071607
#VU131391 - NULL Pointer Dereference
CVE-2026-42409
CWE-476 Medium
No
No
1.4.1, 2.0.3 14.05.2026 SB2026051423
#VU117177 - Missing initialization of resource
CVE-2025-54410
CWE-909 Low
No
No
- 15.10.2025 SB2025101533
SB2025101534
SB2025112459
and 6 more
#VU116609 - Use After Free
CVE-2025-49844
CWE-416 Medium
Public exploit available
No
- 06.10.2025 SB2025100629
SB2025100633
SB2025100709
and 56 more
#VU116213 - Out-of-bounds write
CVE-2025-9230
CWE-787 Medium
No
No
- 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more