Known vulnerabilities in BIG-IP Next for Kubernetes

Known vulnerabilities in BIG-IP Next for Kubernetes

Vendor: F5 Networks

Software: BIG-IP Next for Kubernetes

Software CPE: cpe:2.3:o:f5_networks:big-ip_next_for_kubernetes:*:*:*:*:*:*:*:*

Website: https://f5.com/

Total vulnerabilities: 16

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU137848 - Allocation of Resources Without Limits or Throttling CVE-2026-59762	CWE-770	Medium	No	No	2.2.3, 2.3.2	16.07.2026	SB2026071607
#VU131416 - Stack-based buffer overflow CVE-2026-41956	CWE-121	Medium	No	No	2.1.0	14.05.2026	SB2026051451
#VU131396 - Allocation of Resources Without Limits or Throttling CVE-2026-40629	CWE-770	Medium	No	No	2.1.1	14.05.2026	SB2026051430
#VU131394 - Incorrect Calculation of Buffer Size CVE-2026-40618	CWE-131	Medium	No	No	2.2.0	14.05.2026	SB2026051425 SB2026051426 SB2026051427
#VU131391 - NULL Pointer Dereference CVE-2026-42409	CWE-476	Medium	No	No	2.1.1	14.05.2026	SB2026051423
#VU118189 - Improper input validation CVE-2025-58188	CWE-20	Medium	No	No	2.2.0	07.11.2025	SB2025110705 SB2025110716 SB2025110717 and 110 more
#VU118184 - Resource exhaustion CVE-2025-61723	CWE-400	Medium	No	No	2.2.0	07.11.2025	SB2025110705 SB2025110716 SB2025110717 and 118 more
#VU118181 - Resource exhaustion CVE-2025-58187	CWE-400	Medium	No	No	2.2.0	07.11.2025	SB2025110706 SB2025110731 SB2025112832 and 23 more
#VU118179 - Resource exhaustion CVE-2025-61725	CWE-400	Medium	No	No	2.2.0	07.11.2025	SB2025110705 SB2025110714 SB2025110715 and 76 more
#VU117177 - Missing initialization of resource CVE-2025-54410	CWE-909	Low	No	No	-	15.10.2025	SB2025101533 SB2025101534 SB2025112459 and 6 more
#VU116609 - Use After Free CVE-2025-49844	CWE-416	Medium	Available	No	-	06.10.2025	SB2025100629 SB2025100633 SB2025100709 and 56 more
#VU116213 - Out-of-bounds write CVE-2025-9230	CWE-787	Medium	No	No	-	01.10.2025	SB2025100119 SB2025100132 SB2025100133 and 108 more
#VU114086 - Resource exhaustion CVE-2025-54500	CWE-400	Medium	No	No	-	14.08.2025	SB2025081450 SB2025081451 SB2025081452
#VU113028 - Permissions, Privileges, and Access Controls CVE-2024-56433	CWE-264	Medium	No	No	-	17.07.2025	SB2025071777 SB2025071778 SB2025071779 and 5 more
#VU96712 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-45310	CWE-362	Low	No	No	-	03.09.2024	SB2024090315 SB2024091283 SB2024091416 and 18 more
#VU81964 - Improper input validation CVE-2023-39323	CWE-20	Medium	No	No	-	12.10.2023	SB2023101258 SB2023101259 SB2023101260 and 38 more