CVEs published in May 2026

CVE-2026-8515Critical

Use after free in HID

CVE-2026-8514Critical

Use after free in Aura

CVE-2026-8513High

Use after free in Input

CVE-2026-8512Critical

Use after free in FileSystem

CVE-2026-8511Critical

Use after free in UI

CVE-2026-8510High

Integer overflow in Skia

CVE-2026-8509Critical

Heap buffer overflow in WebML

CVE-2026-42897HighCISA KEV

Microsoft Exchange Server Cross-Site Scripting Vulnerability

CVE-2026-20224High

CVE-2026-20210High

CVE-2026-20209High

CVE-2026-20188High

Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory

CVE-2026-6575High

Information disclosure via buffer over-read in pg_restore_attribute_stats

CVE-2026-6478Critical

Credential recovery via covert timing channel in MD5 password comparison

CVE-2026-6477Critical

PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

CVE-2026-6475Critical

Operating system account hijack via symlink following in pg_basebackup and pg_rewind

CVE-2026-6474Critical

Information disclosure via externally-controlled format string in timeofday function

CVE-2026-6473Critical

integer overflow can cause an undersized allocation and an out-of-bounds write

CVE-2026-6472Critical

PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege

CVE-2026-0243High

denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices

CVE-2026-0248High

improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS

CVE-2026-0245Medium

Multiple information disclosure vulnerabilities in Prisma Access Agent®

CVE-2026-0244High

improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION

CVE-2026-0240High

information disclosure vulnerability in Trust Protection Foundation

CVE-2026-0239Unrated

information disclosure vulnerability in the Chronosphere Chronocollector

CVE-2026-0238Medium

vulnerability in Palo Alto Networks Broker VM

CVE-2026-44248Critical

Denial of Service due to excessive resource consumption from crafted MQTT 5 header

CVE-2026-42587Critical

Denial of Service via unbounded memory allocation in HTTP content decompression

CVE-2026-8022148Unrated

CVE-2026-8022Unrated

CVE-2026-8018148Unrated

CVE-2026-8018Unrated

CVE-2026-7981148Unrated

CVE-2026-7981Unrated

CVE-2026-7363147Unrated

CVE-2026-7361147Unrated

CVE-2026-7359147Unrated

CVE-2026-7343147Unrated

CVE-2026-6921147Unrated

CVE-2026-6361147Unrated

CVE-2026-6305147Unrated

CVE-2026-5919147Unrated

CVE-2026-5919Unrated

CVE-2026-5914147Unrated

CVE-2026-5914Unrated

CVE-2026-5909147Unrated

CVE-2026-5909Unrated

CVE-2026-5893147Unrated

CVE-2026-5893Unrated

CVE-2026-5886147Unrated

CVE-2026-5886Unrated

CVE-2026-5884147Unrated

CVE-2026-5884Unrated

CVE-2026-5881147Unrated

CVE-2026-5881Unrated

CVE-2026-5876147Unrated

CVE-2026-5876Unrated

CVE-2026-5292Unrated

CVE-2026-5291Unrated

CVE-2026-5290Unrated

CVE-2026-5289Unrated

CVE-2026-5288Unrated

CVE-2026-4464Unrated

CVE-2026-4445Unrated

CVE-2026-0237Unrated

CVE-2026-0236Unrated

CVE-2026-0235Unrated

CVE-2026-42584Critical

Incorrect HTTP response parsing leads to data confusion

CVE-2026-42583Critical

DoS (Denial of Service) io.netty:netty-codec Dependency in Bitbucket Data Center

CVE-2026-42579Critical

High integrity impact due to improper DNS domain name constraint enforcement

CVE-2026-42578Critical

HTTP Header Injection via HttpProxyHandler Disabled Validation

CVE-2026-42581Critical

HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

CVE-2026-42946Critical

NGINX: vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data

CVE-2026-42937High

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST

CVE-2026-42934Critical

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module

CVE-2026-42930High

When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system

CVE-2026-42926Medium

When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer

CVE-2026-42924High

F5: authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP resulting in privilege escalation

CVE-2026-42920High

F5: When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate

CVE-2026-42919High

vulnerability exists in BIG-IP systems that may allow an authenticated attacker with administrative access to escalate their privileges

CVE-2026-42781High

F5: When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management Microkernel (TMM) resource utilization

CVE-2026-42780Medium

directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authenticated attacker with high privilege to overwrite, delete or corrupt arbitrary local files

CVE-2026-42409High

F5: When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate

CVE-2026-42408Medium

When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command that may allow a highly privileged authenticated attacker to view sensitive information

CVE-2026-42406High

vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands

CVE-2026-42063Medium

F5: vulnerability exists in iControl SOAP where an authenticated attacker with the Resource Administrator or Administrator role can download sensitive files

CVE-2026-42058Medium

authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names

CVE-2026-41959High

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics commands and in BIG-IP iControl REST

CVE-2026-41957High

authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility

CVE-2026-41956High

F5: When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate

CVE-2026-41954Medium

F5: Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information

CVE-2026-41953High

vulnerability exists in BIG-IP systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can modify configuration objects resulting in privilege escalation

CVE-2026-41227High

F5: On an HTTP/2 virtual server with Layer 7 DoS Protection configured, undisclosed traffic can result in an increase in memory consumption causing the Traffic Management Microkernel (TMM) process to terminate

CVE-2026-41225High

F5: vulnerability exists in iControl REST where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects that allow running arbitrary commands

CVE-2026-41219High

improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file

CVE-2026-41218High

When BIG-IP PEM iRules are configured on a virtual server (iRules using commands starting with CLASSIFICATION::, CLASSIFY::, PEM::, PSC::, and the urlcatquery command), undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate

CVE-2026-41217High

vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with resource administrator or administrator role to execute arbitrary system commands with higher privileges

CVE-2026-40703Medium

cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility

CVE-2026-40701Critical

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or the leaf parameters are configured with a resolver

CVE-2026-40699High

F5: vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information