F5 BIG-IP · week of 26 Oct 2026
F5 BIG-IP security note
Records on this stack that changed between 26 Oct 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.
What changed
CVE-2026-99152 — Check if you run it
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named by a management response __iscsi_complete_pdu() fetches the task for fiv
Seen in 6.1.106-1 · 3 other packages on the advisory
CVE-2026-99153 — Check if you run it
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a Reject PDU A Reject PDU carries a copy of the header it rejects,
Seen in 6.1.106-1 · 3 other packages on the advisory
What we still do not know
Every changed record in this note has a version range.
Share this note
F5 BIG-IP security note, week of 26 Oct 2026: 2 records have a version a customer can check, and 0 still do not. https://zerodayfindings.com/technologies/f5/notes/2026-W44