F5 BIG-IP vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
166 matching records
- Medium6.9When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of auth…Check if you run itEPSS 0.37%May 13, 2026
- Medium6.9When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses.Check if you run itEPSS 0.23%May 13, 2026
- High8.7When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.26%May 13, 2026
- High8.7When a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the apmd process to terminate.Check if you run itEPSS 0.32%May 13, 2026
- High8.5When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker wi…Check if you run itEPSS 0.24%May 13, 2026
- High8.7When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.Check if you run itEPSS 0.32%May 13, 2026
- High8.6A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged, authenticated attacker with at least the Manager role can create configura…Check if you run itEPSS 0.26%May 13, 2026
- High8.7When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, Advanced WAF DoS protection), undisclosed traffic can cause…Check if you run itEPSS 0.26%May 13, 2026
- High8.7When the BIG-IP Configuration utility is configured to use Lightweight Directory Access Protocol (LDAP) authentication, undisclosed traffic can cause the httpd process…Check if you run itEPSS 0.30%May 13, 2026
- High7.1An authenticated iControl SOAP user may be able to obtain information of other accounts.Check if you run itEPSS 0.25%May 13, 2026
- High8.5When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint.Check if you run itEPSS 0.69%May 13, 2026
- Medium6.3When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (…Check if you run itEPSS 0.29%May 13, 2026
- High8.5A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary…Check if you run itEPSS 0.24%May 13, 2026
- High8.5A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configurati…Check if you run itEPSS 0.16%May 13, 2026
- Medium6.7When BIG-IP DNS is provisioned, a vulnerability exists in the gtm_add and bigip_add iControl REST commands that return the ssh-password parameter in cleartext in the i…Check if you run itEPSS 0.08%May 13, 2026
- Medium6.9When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with admin…Check if you run itEPSS 0.89%May 13, 2026
- High7.2An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system.Check if you run itEPSS 0.37%May 13, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set dev->online_queues is a count incremented in nvm…Check if you run itEPSS 0.13%May 8, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets When the FarSync T-series…Check if you run itEPSS 0.39%May 6, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/kasan: fix double free for kasan pXds kasan_free_pxd() assumes the page table is always struct p…Check if you run itEPSS 0.12%Apr 27, 2026
- High8.5NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to t…Check if you run itEPSS 0.93%Mar 24, 2026
- Medium5.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the…Check if you run itEPSS 0.14%Mar 24, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses.Check if you run itEPSS 0.27%Mar 24, 2026
- High8.5The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX wo…Check if you run itEPSS 1.07%Mar 24, 2026
- High8.8ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution VulnerabilityCheck this weekEPSS 25.94%Mar 24, 2026