BN
Product
Big-ip Next Cloud-native Network Functions
27
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 23Medium 4Low 0
Watch
Add Big-ip Next Cloud-native Network Functions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59762 | 7.5 | Jul 15 | BIG-IP HTTP/2 vulnerability Affected: 1.1.0 before 1.4.3; 2.0.0 before 2.2.3; 2.3.0 |
| CVE-2026-42409 | 7.5 | May 13 | BIG-IP HTTP/2 vulnerability Affected: 1.1.0 through 1.4.0; 2.0.0 through 2.0.2 |
| CVE-2026-40618 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 1.1.0 through 1.4.1; 2.0.0 through 2.2.1 |
| CVE-2026-41956 | 7.5 | May 13 | BIG-IP TMM Vulnerability Affected: 2.0.0 through 2.0.2; 1.4.0 |
| CVE-2026-40629 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 2.0.0 through 2.0.2; 1.4.0 |
| CVE-2025-61990 | 7.5 | Oct 15 | TMM vulnerability Affected: 1.1.0 through 1.4.0; 2.0.0 through 2.1.0 |
| CVE-2025-58071 | 7.5 | Oct 15 | BIG-IP IPSec vulnerability Affected: 1.1.0 through 1.4.1; 2.0.0 through 2.1.0 |
| CVE-2025-61974 | 7.5 | Oct 15 | BIG-IP SSL/TLS vulnerability Affected: 1.1.0 through 1.4.1; 2.0.0 through 2.1.0 |
| CVE-2025-58120 | 7.5 | Oct 15 | BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability Affected: 1.1.0 through 1.4.1; 2.0.0 |
| CVE-2025-54479 | 7.5 | Oct 15 | BIG-IP PEM vulnerability Affected: 1.1.0 through 1.4.0; 2.0.0; 2.0.1; 2.0.2; 2.1.0 |
| CVE-2025-59781 | 7.5 | Oct 15 | BIG-IP DNS cache vulnerability Affected: 1.1.0 through 1.4.0 |
| CVE-2025-46706 | 7.5 | Oct 15 | BIG-IP iRules vulnerability Affected: 1.1.0 through 1.4.1 |
| CVE-2025-48008 | 7.5 | Oct 15 | BIG-IP MPTCP vulnerability Affected: 1.1.0 through 1.4.1 |
| CVE-2025-60016 | 7.5 | Oct 15 | BIG-IP SSL/TLS vulnerability Affected: 1.1.0 before 1.4.0 |
| CVE-2025-36504 | 7.5 | May 7 | BIG-IP HTTP/2 vulnerability Affected: 1.1.0 through 1.4.1 |
| CVE-2025-41414 | 7.5 | May 7 | BIG-IP HTTP/2 vulnerability Affected: 1.1.0 before 1.4.0 |
| CVE-2025-36557 | 7.5 | May 7 | BIG-IP HTTP vulnerability Affected: 1.1.0 before 1.4.0 |
| CVE-2025-41399 | 7.5 | May 7 | SCTP Vulnerability Affected: 1.1.0 before 1.3.0 |
| CVE-2025-24312 | 7.5 | Feb 5 | BIG-IP AFM vulnerability Affected: 1.1.0 before 1.4.0 |
| CVE-2024-41164 | 7.5 | Aug 14 | BIG-IP MPTCP vulnerability Affected: 1.1.0 before 1.2.0 |
| CVE-2024-25560 | 7.5 | May 8 | When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate Affected: 1.1.0 before 1.2.0 |
| CVE-2023-45886 | 7.5 | Nov 21 | The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed… Affected: 1.1.0 through 1.1.1 |
| CVE-2024-23306 | 7.1 | Feb 14 | A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files. Note: Software versions which have reached End of Technical… Affected: 1.1.0 before 1.2.0 |
| CVE-2025-54805 | 6.5 | Oct 15 | TMM Vulnerability Affected: 1.1.0 through 1.4.1 |
| CVE-2025-55670 | 6.5 | Oct 15 | BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability Affected: 1.1.0 through 1.4.1 |
| CVE-2025-54500 | 5.3 | Aug 13 | HTTP/2 Vulnerability Affected: 1.1.0 through 1.4.1; 2.0.0 through 2.0.2 |
| CVE-2024-28132 | 4.4 | May 8 | Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note:… Affected: 1.2.0 before 1.3.0 |
Showing 27