What’s Vulnerable › Products
F5 BIG-IP (all modules) vulnerabilities
405 known vulnerabilities, 6 confirmed exploited in the wild (CISA KEV), 75 published in the last 12 months.
Check whether your F5 BIG-IP (all modules) version is affected
Exploited F5 BIG-IP (all modules) vulnerabilities
- CVE-2018-14634 — Linux Kernel Integer Overflow Vulnerability
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
- CVE-2022-1388 — F5 BIG-IP Missing Authentication Vulnerability
- CVE-2021-22991 — F5 BIG-IP Traffic Management Microkernel Buffer Overflow
- CVE-2021-22986 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
- CVE-2020-5902 — F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
Latest F5 BIG-IP (all modules) vulnerabilities
- CVE-2026-63020 — BIG-IP Configuration utility vulnerability (CVSS 3.1)
- CVE-2026-42937 — iControl REST and tmsh vulnerability (CVSS 6.5)
- CVE-2026-42930 — Appliance mode iControl REST vulnerability (CVSS 8.7)
- CVE-2026-42924 — BIG-IP iControl SOAP vulnerability (CVSS 8.7)
- CVE-2026-42920 — BIG-IP DTLS Vulnerability (CVSS 7.5)
- CVE-2026-42919 — F5 BIG-IP Appliance Mode Vulnerability (CVSS 6.7)
- CVE-2026-42781 — BIG-IP FastL4 virtual server vulnerability (CVSS 6.5)
- CVE-2026-42409 — BIG-IP HTTP/2 vulnerability (CVSS 7.5)
- CVE-2026-42408 — BIG-IP DNS tmsh vulnerability (CVSS 4.4)
- CVE-2026-42406 — BIG-IP and BIG-IQ privilege escalation vulnerability (CVSS 8.7)
- CVE-2026-42063 — iControl SOAP vulnerability (CVSS 4.9)
- CVE-2026-42058 — BIG-IP iControl REST vulnerability (CVSS 4.3)
- CVE-2026-41959 — iControl and tmsh REST vulnerability (CVSS 6.5)
- CVE-2026-41957 — BIG-IP and BIG-IQ Configuration utility vulnerability (CVSS 8.8)
- CVE-2026-41956 — BIG-IP TMM Vulnerability (CVSS 7.5)
- CVE-2026-41954 — iControl REST and tmsh vulnerability (CVSS 4.9)
- CVE-2026-41953 — BIG-IP Privilege Escalation vulnerability (CVSS 8.7)
- CVE-2026-41225 — iControl REST vulnerability (CVSS 9.1)
- CVE-2026-41219 — BIG-IP QKView vulnerability (CVSS 6.5)
- CVE-2026-41218 — BIG-IP PEM iRules vulnerability (CVSS 7.5)
- CVE-2026-41217 — BIG-IP tmsh vulnerability (CVSS 7.9)
- CVE-2026-40703 — BIG-IP Configuration utility CSRF vulnerability (CVSS 5.4)
- CVE-2026-40699 — BIG-IP Configuration utility vulnerability (CVSS 6.5)
- CVE-2026-40698 — iControl REST and TMSH vulnerability (CVSS 8.7)
- CVE-2026-40631 — BIG-IP iControl SOAP vulnerability (CVSS 8.7)