CVE-2026-41957
An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility.
Published May 13, 2026 · updated Jun 23, 2026 · f5 big-ip access policy manager
An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 13, 2026 · NIST NVD
Detected
An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Jun 23, 2026 · NIST NVD
Updated
An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected
- cpe f5/big-ip access policy managerversion unspecified
- cpe f5/big-ip advanced firewall managerversion unspecified
- cpe f5/big-ip advanced web application firewallversion unspecified
- cpe f5/big-ip analyticsversion unspecified
- cpe f5/big-iq centralized management8.4.0
Sources
- CVE.orgVulnerability recordCVE-2026-41957
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-41957
An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
nvd.nist.gov