Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: F5 BIG-IP Next CNF 1.4.1, 2.0.3 Clear all filters
TI-2026-30706 CVE-2026-42409 · GHSA-qj39-79pv-x52r

BIG-IP HTTP/2 vulnerability

Priority MEDIUM 43

When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00263 Published 2026-05-13 Fixed in 21.1.0, 21.0.0.1 +6 CWE-476
TI-2026-30351 CVE-2026-41956 · GHSA-7vhg-fvrv-7x3q

BIG-IP TMM Vulnerability

Priority MEDIUM 43

When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00263 Published 2026-05-13 Fixed in 21.0.0, 17.5.1.4 +4 CWE-121
TI-2026-29357 CVE-2026-40629 · GHSA-x2rm-72v8-7794

BIG-IP SSL/TLS vulnerability

Priority MEDIUM 44

When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00324 Published 2026-05-13 Fixed in 21.0.0, 17.5.1.4 +5 CWE-770