CVE-2026-41219
An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file.
Published May 13, 2026 · updated Jun 24, 2026 · f5 big-ip access policy manager
An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 13, 2026 · NIST NVD
Detected
An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Jun 24, 2026 · NIST NVD
Updated
An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected
- cpe f5/big-ip access policy managerversion unspecified
- cpe f5/big-ip advanced firewall managerversion unspecified
- cpe f5/big-ip advanced web application firewallversion unspecified
- cpe f5/big-ip analyticsversion unspecified
- cpe f5/big-iq centralized management8.4.0
Sources
- CVE.orgVulnerability recordCVE-2026-41219
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-41219
An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
nvd.nist.gov