Login Request a demo
BG
Product
Big-ip Global Traffic Manager
by F5 · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
489
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities489In the news1Timeline
Severity mix
Critical 33High 264Medium 168Low 4
Severity
All severities489Critical33High264Medium168Low4
Exploitation
On CISA KEV11Exploited in the wild11
Watch

Add Big-ip Global Traffic Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-9075
7.8
2%
Feb 24
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32
Affected: 14.1.0; 15.0.0
CVE-2018-13405
7.8
1%
Jul 6
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory…
Affected: 13.0.0 before 13.1.3.5; 14.0.0 before 14.1.3.1; 15.0.0 before 15.0.1.4; 15.1.0; 16.0.0
CVE-2026-40423
7.5
0%
May 13
BIG-IP SIP profile vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-39458
7.5
0%
May 13
BIG-IP DNS Cache vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-39455
7.5
0%
May 13
BIG-IP Configuration utility vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-42409
7.5
0%
May 13
BIG-IP HTTP/2 vulnerability
Affected: 21.0.0; 16.1.0 through 16.1.6; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1
CVE-2026-40618
7.5
0%
May 13
BIG-IP SSL/TLS vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-41956
7.5
0%
May 13
BIG-IP TMM Vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-42920
7.5
0%
May 13
BIG-IP DTLS Vulnerability
Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-40629
7.5
0%
May 13
BIG-IP SSL/TLS vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-41218
7.5
0%
May 13
BIG-IP PEM iRules vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2025-61990
7.5
0%
Oct 15
TMM vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.3
CVE-2025-58071
7.5
0%
Oct 15
BIG-IP IPSec vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0
CVE-2025-58096
7.5
0%
Oct 15
BIG-IP TMM vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3
CVE-2025-61951
7.5
0%
Oct 15
BIG-IP DTLS 1.2 Vulnerability
Affected: 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0
CVE-2025-53856
7.5
0%
Oct 15
TMM vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3
CVE-2025-59781
7.5
0%
Oct 15
BIG-IP DNS cache vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-46706
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-48008
7.5
0%
Oct 15
BIG-IP MPTCP vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6
CVE-2025-53474
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 15.1.0 before 15.1.1.0.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3
CVE-2025-52585
7.5
0%
Aug 13
BIG-IP Client SSL profile vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-41431
7.5
0%
May 7
TMM Vulnerability
Affected: 17.1.2
CVE-2025-36504
7.5
0%
May 7
BIG-IP HTTP/2 vulnerability
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-41414
7.5
0%
May 7
BIG-IP HTTP/2 vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-41433
7.5
0%
May 7
BIG-IP SIP ALG profile vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-36557
7.5
0%
May 7
BIG-IP HTTP vulnerability
Affected: 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-41399
7.5
0%
May 7
SCTP Vulnerability
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2025-22846
7.5
0%
Feb 5
BIG-IP SIP Vulnerability
Affected: 15.1.0 before 15.1.10.6.0.11.6; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-20045
7.5
0%
Feb 5
BIG-IP SIP MRF Vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-20058
7.5
0%
Feb 5
BIG-IP message routing vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-21091
7.5
0%
Feb 5
BIG-IP SNMP vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-21087
7.5
0%
Feb 5
TMM Vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2024-41727
7.5
0%
Aug 14
BIG-IP TMM vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-41164
7.5
0%
Aug 14
BIG-IP MPTCP vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-39778
7.5
0%
Aug 14
BIG-IP HSB vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-25560
7.5
1%
May 8
TMM Vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.4; 17.1.0
CVE-2024-33608
7.5
1%
May 8
BIG-IP IPsec vulnerability
Affected: 17.1.0
CVE-2024-24775
7.5
1%
Feb 14
When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note:…
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2024-23979
7.5
0%
Feb 14
When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is configured on a virtual server, undisclosed requests can cause…
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2024-23314
7.5
1%
Feb 14
When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions…
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2023-45886
7.5
2%
Nov 21
The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 through 17.1.1
CVE-2023-41085
7.5
1%
Oct 10
When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40542
7.5
1%
Oct 10
When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization.  Note:…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40534
7.5
1%
Oct 10
When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated…
Affected: 16.1.0 before 16.1.4.1; 17.1.0
CVE-2023-29163
7.5
1%
May 3
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions…
Affected: 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0
CVE-2022-41833
7.5
1%
Oct 19
BIG-IP iRule vulnerability CVE-2022-41833
Affected: 13.1.0 through 13.1.5
CVE-2022-41832
7.5
1%
Oct 19
BIG-IP SIP vulnerability CVE-2022-41832
Affected: 13.1.0 before 13.1.5.1; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1
CVE-2022-41624
7.5
1%
Oct 19
BIG-IP iRules vulnerability CVE-2022-41624
Affected: 13.1.0 before 13.1.5.1; 14.1.0 before 14.1.5.2; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.2; 17.0.0 before 17.0.0.1
CVE-2022-36795
7.5
1%
Oct 19
BIG-IP software SYN cookies vulnerability CVE-2022-36795
Affected: 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1
CVE-2022-35240
7.5
1%
Aug 4
BIG-IP Message Routing MQTT vulnerability CVE-2022-35240
Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2
Page 2 of 6 · 264 total
123…6