What’s Vulnerable › Products
F5 BIG-IQ vulnerabilities
86 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Check whether your F5 BIG-IQ version is affected
Exploited F5 BIG-IQ vulnerabilities
- CVE-2018-14634 — Linux Kernel Integer Overflow Vulnerability
- CVE-2014-0196 — Linux Kernel Race Condition Vulnerability
- CVE-2021-22986 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
Latest F5 BIG-IQ vulnerabilities
- CVE-2026-66842 — BIG-IP and BIG-IQ Configuration utility vulnerability (CVSS 8.8)
- CVE-2026-42406 — BIG-IP and BIG-IQ privilege escalation vulnerability (CVSS 8.7)
- CVE-2026-41959 — iControl and tmsh REST vulnerability (CVSS 6.5)
- CVE-2026-41957 — BIG-IP and BIG-IQ Configuration utility vulnerability (CVSS 8.8)
- CVE-2026-41954 — iControl REST and tmsh vulnerability (CVSS 4.9)
- CVE-2026-41219 — BIG-IP QKView vulnerability (CVSS 6.5)
- CVE-2026-40698 — iControl REST and TMSH vulnerability (CVSS 8.7)
- CVE-2026-32643 — BIG-IP and BIG-IQ privilege escalation vulnerability (CVSS 8.7)
- CVE-2026-20916 — BIG-IQ iControl REST vulnerability (CVSS 8.1)
- CVE-2024-47139 — F5 BIG-IQ Vulnerability (CVSS 6.8)
- CVE-2024-24775 — BIG-IP TMM vulnerability (CVSS 7.5)
- CVE-2024-23979 — BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability (CVSS 7.5)
- CVE-2024-23976 — BIG-IP Appliance mode iAppsLX vulnerability (CVSS 6.0)
- CVE-2024-23314 — BIG-IP HTTP/2 vulnerability (CVSS 7.5)
- CVE-2024-22389 — BIG-IP iControl REST API Vulnerability (CVSS 7.2)
- CVE-2024-22093 — Appliance mode iControl REST vulnerability (CVSS 8.7)
- CVE-2024-21782 — BIG-IP and BIG-IQ secure copy vulnerability (CVSS 6.7)
- CVE-2023-43485 — BIGIP and BIG-IQ TACACS+ audit log Vulnerability (CVSS 5.5)
- CVE-2023-41964 — BIG-IP and BIG-IQ Database Variable vulnerability (CVSS 6.5)
- CVE-2023-38419 — BIG-IP and BIG-IQ iControl SOAP vulnerability (CVSS 4.3)
- CVE-2023-29240 — BIG-IQ iControl REST Vulnerability (CVSS 5.4)
- CVE-2022-41622 — iControl SOAP vulnerability (CVSS 8.8)
- CVE-2022-41770 — BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770 (CVSS 6.5)
- CVE-2022-35728 — iControl REST vulnerability CVE-2022-35728 (CVSS 9.8)
- CVE-2022-34851 — BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851 (CVSS 6.5)