CVE-2026-40699
A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information.
Published May 13, 2026 · updated Jun 24, 2026 · f5 big-ip access policy manager
A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 13, 2026 · NIST NVD
Detected
A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Jun 24, 2026 · NIST NVD
Updated
A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected
- cpe f5/big-ip access policy managerversion unspecified
- cpe f5/big-ip advanced firewall managerversion unspecified
- cpe f5/big-ip advanced web application firewallversion unspecified
- cpe f5/big-ip analyticsversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-40699
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-40699
A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
nvd.nist.gov