BIG-IP Container Ingress Services vulnerability
Priority LOW 31CWE-250Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-250.
Summary
A vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions to read cluster secrets. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00366 30th percentileScored 2026-11-07
Fix Fixed F5 BIG-IP Container Ingress Services (F5): 2.20.2
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| F5 | F5 BIG-IP Container Ingress Services | 2.0.0 to before 2.20.2; 1.0.0 and later | 2.20.2 | Patch available | CNA |
- F5 BIG-IP Container Ingress Services VendorF5 Affected 2.0.0 to before 2.20.2; 1.0.0 and later Fixed in 2.20.2 Patch available CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* | 1.0.0 – 1.14.0; 2.0.0 to before 2.2.0.2 | Vulnerable | F5 |
| cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Kubernetes |
| cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Red Hat |
- cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* Versions 1.0.0 – 1.14.0; 2.0.0 to before 2.2.0.2 Vulnerable ·F5
- cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Kubernetes
- cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Red Hat
Remediation
- Fix · CNA F5 BIG-IP Container Ingress Services (F5) Fixed in 2.20.2
Timeline
- 2026-10-02 Threatist record created from CVE-2026-22549
- 2026-10-03 Alias added: GHSA-qv83-wx6q-j989
References
More F5 Big-ip Container Ingress Services vulnerabilities
- TI-2023-25230 BIG-IP Configuration utility unauthenticated remote code execution vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2023-25231 BIG-IP Configuration utility authenticated SQL injection vulnerability KEVCVSS 3.1HIGH 8.8
- TI-2025-14341 BIG-IP iControl REST and tmsh vulnerability CVSS 4.0HIGH 8.7
- TI-2025-22807 Appliance mode BIG-IP iControl REST and tmsh vulnerability CVSS 4.0HIGH 8.5
- TI-2024-30801 BIG-IP monitors vulnerability CVSS 4.0HIGH 8.6
- TI-2025-15083 TMM Vulnerability CVSS 4.0HIGH 8.9
Sources
- CVE-2026-22549 · CVE Program
- CVE-2026-22549 · NVD
- FIRST EPSS
- GHSA-qv83-wx6q-j989 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences