CVE-2026-40060
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.
Published May 13, 2026 · updated Jun 29, 2026 · f5 big-ip application security manager
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 13, 2026 · NIST NVD
Detected
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Jun 29, 2026 · NIST NVD
Updated
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected
- cpe f5/big-ip advanced web application firewallversion unspecified
- cpe f5/big-ip advanced web application firewall21.0.0
- cpe f5/big-ip application security managerversion unspecified
- cpe f5/big-ip application security manager21.0.0
Sources
- CVE.orgVulnerability recordCVE-2026-40060
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-40060
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
nvd.nist.gov