Read the docs
TI-2023-24231 Aliases CVE-2023-45226GHSA-6vq9-584m-2q8f

BIG-IP Next SPK SSH vulnerability

Priority LOW 35CWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow an attacker with the ability to intercept traffic to impersonate the SPK Secure Shell (SSH) server on those containers. This is only exposed when ssh debug is enabled.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00456 39th percentileScored 2026-11-07
Fix Fixed BIG-IP Next SPK (F5): 1.6.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
F5BIG-IP Next SPK1.5.0 to before 1.6.01.6.0Patch availableCNA
  • BIG-IP Next SPK VendorF5 Affected 1.5.0 to before 1.6.0 Fixed in 1.6.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:f5:big-ip_next_service_proxy_for_kubernetes:1.5.0:*:*:*:*:*:*:*1.5.0VulnerableF5
  • cpe:2.3:a:f5:big-ip_next_service_proxy_for_kubernetes:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·F5

Remediation

  • Fix · CNA BIG-IP Next SPK (F5) Fixed in 1.6.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-45226
  2. 2026-10-03 Alias added: GHSA-6vq9-584m-2q8f

References

Advisory 1

  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2026-42605 BIG-IP HTTP/2 vulnerability CVSS 4.0HIGH 8.7
  • TI-2026-29357 BIG-IP SSL/TLS vulnerability CVSS 4.0HIGH 8.7
  • TI-2026-29350 BIG-IP SSL/TLS vulnerability CVSS 4.0HIGH 8.7
  • TI-2025-38317 TMM vulnerability CVSS 4.0HIGH 8.7
  • TI-2025-38308 BIG-IP SSL/TLS vulnerability CVSS 4.0HIGH 8.7
See all 23 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences