F5 BIG-IP Vulnerabilities & Security Advisories

1 advisories tracked · F5 SIRT (f5sirt@f5.com CNA) via NVD · 0 listed in the CISA Known Exploited Vulnerabilities catalog

Every row below is a published F5 advisory that VulniPulse classified as BIG-IP, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1 high.

Android app · Google Play

Monitor F5 CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Get CVE alerts See app features

Source

F5 SIRT (f5sirt@f5.com CNA) via NVD

F5 is its own CVE Numbering Authority. VulniPulse ingests F5's CVEs from the NVD CNA feed (f5sirt@f5.com), each linking to its my.f5.com / support.f5.com security article. Covers BIG-IP (LTM, ASM/Advanced WAF, APM, AFM), BIG-IP Next, BIG-IQ, NGINX / NGINX Plus, F5OS and Distributed Cloud — internet-facing application-delivery and security appliances that are repeatedly mass-exploited (e.g. the CVE-2023-46747 RCE), so a patch-now enterprise audience.

Visit F5 advisories F5 RSS feed BIG-IP end-of-life dates(16 dated releases)

Latest F5 BIG-IP advisories

All severities critical (0)high (1)medium (0)low (0)

High8.7F5

High [CVE-2026-59762] BIG-IP: When an HTTP/2 profile is configured on a virtual server, undisclosed requests

When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote, unauthenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Affected products named by the advisory: BIG-IP Next for Kubernetes; BIG-IP Next SPK; BIG-IP Next CNF.