Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority MEDIUM 40

BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00468 Published 2026-09-02 Fixed in 21.1.0.1, 21.0.0.3 +3 CWE-918
TI-2026-45009 CVE-2026-63020 · GHSA-7f8w-84hq-vpww

BIG-IP Configuration utility vulnerability

Priority LOW 12

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and re…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.0023 Published 2026-09-02 Fixed in 21.1.0.1, 21.0.0.3 +2 CWE-451