BI
Network Security
BIG-IP
On CISA KEVExploited in the wildRansomware-linked
155
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 98Medium 41Low 3
Watch
Add BIG-IP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46748 In wildKEV | 8.8 | Oct 26 | BIG-IP Configuration utility authenticated SQL injection vulnerability Affected: 17.1.0; 16.1.0; 15.1.0; 14.1.0; 13.1.0 |
| CVE-2026-66842 | 8.8 | Sep 2 | BIG-IP and BIG-IQ Configuration utility vulnerability Affected: 21.1.0 before 21.1.0.1; 21.0.0 before 21.0.0.3; 17.5.0 before 17.5.1.8; 17.1.0 before 17.1.3.4 |
| CVE-2026-41957 | 8.8 | May 13 | BIG-IP and BIG-IQ Configuration utility vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2025-20029 | 8.8 | Feb 5 | BIG-IP iControl REST and tmsh vulnerability Affected: 17.1.0 before 17.1.2.1; 16.1.0 before 16.1.5.2; 15.1.0 before 15.1.10.6 |
| CVE-2026-42930 | 8.7 | May 13 | Appliance mode iControl REST vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-42406 | 8.7 | May 13 | BIG-IP and BIG-IQ privilege escalation vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-32643 | 8.7 | May 13 | BIG-IP and BIG-IQ privilege escalation vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-32673 | 8.7 | May 13 | BIG-IP scripted monitor vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-34176 | 8.7 | May 13 | Knowledge Appliance mode iControl REST vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-41953 | 8.7 | May 13 | BIG-IP Privilege Escalation vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-40631 | 8.7 | May 13 | BIG-IP iControl SOAP vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-40698 | 8.7 | May 13 | iControl REST and TMSH vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-42924 | 8.7 | May 13 | BIG-IP iControl SOAP vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-40061 | 8.7 | May 13 | iControl REST and tmsh vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2025-59481 | 8.7 | Oct 15 | BIG-IP iControl REST and tmsh vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-61958 | 8.7 | Oct 15 | BIG-IP TMSH vulnerability Affected: 17.5.0 before 17.5.1.1; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-53868 | 8.7 | Oct 15 | BIG-IP SCP and SFTP vulnerability Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3.1; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-31644 | 8.7 | May 7 | Appliance mode BIG-IP iControl REST and tmsh vulnerability Affected: 17.1.0 before 17.1.2.2; 16.1.0 before 16.1.6; 15.1.0 before 15.1.10.7 |
| CVE-2025-23239 | 8.7 | Feb 5 | BIG-IP iControl REST vulnerability Affected: 17.1.1 before 17.1.2 |
| CVE-2025-24320 | 8.0 | Feb 5 | BIG-IP Configuration utility vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0 before 16.1.5.2; 15.1.0 before 15.1.10.6 |
| CVE-2024-31156 | 8.0 | May 8 | BIG-IP Configuration utility XSS vulnerability Affected: 17.1.0 before 17.1.1.3; 16.1.0 before 16.1.4.3; 15.1.0 before 15.1.10.4 |
| CVE-2026-41217 | 7.9 | May 13 | BIG-IP tmsh vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-59762 | 7.5 | Jul 15 | BIG-IP HTTP/2 vulnerability Affected: 21.1.0 before 21.1.0.1; 21.0.0 before 21.0.0.3; 17.5.0 before 17.5.1.8; 17.1.0 before 17.1.3.4 |
| CVE-2026-40423 | 7.5 | May 13 | BIG-IP SIP profile vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-39458 | 7.5 | May 13 | BIG-IP DNS Cache vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-39455 | 7.5 | May 13 | BIG-IP Configuration utility vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2026-40060 | 7.5 | May 13 | BIG-IP Advanced WAF and ASM vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-42409 | 7.5 | May 13 | BIG-IP HTTP/2 vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-41227 | 7.5 | May 13 | BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-40618 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.1.5.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-41956 | 7.5 | May 13 | BIG-IP TMM Vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-42920 | 7.5 | May 13 | BIG-IP DTLS Vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-40629 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-41218 | 7.5 | May 13 | BIG-IP PEM iRules vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-40067 | 7.5 | May 13 | BIG-IP APM Vulnerability Affected: 21.0.0 before 21.0.0.1; 17.5.0 before 17.5.1.4; 17.1.0 before 17.1.3.1; 16.1.0 |
| CVE-2026-2507 | 7.5 | Feb 18 | BIG-IP TMM Vulnerability Affected: 17.5.1.4 |
| CVE-2025-61990 | 7.5 | Oct 15 | TMM vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-58071 | 7.5 | Oct 15 | BIG-IP IPSec vulnerability Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-61935 | 7.5 | Oct 15 | BIG-IP Advanced WAF and ASM vulnerability Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3; 15.1.0 before 15.1.10.8 |
| CVE-2025-61974 | 7.5 | Oct 15 | BIG-IP SSL/TLS vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-61960 | 7.5 | Oct 15 | BIG-IP APM portal access vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1 |
| CVE-2025-54854 | 7.5 | Oct 15 | BigIP APM Vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-58096 | 7.5 | Oct 15 | BIG-IP TMM vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-54858 | 7.5 | Oct 15 | BIG-IP Advanced WAF and ASM vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-61951 | 7.5 | Oct 15 | BIG-IP DTLS 1.2 Vulnerability Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1 |
| CVE-2025-53856 | 7.5 | Oct 15 | TMM vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-54479 | 7.5 | Oct 15 | BIG-IP PEM vulnerability Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-41430 | 7.5 | Oct 15 | BIG-IP SSL Orchestrator vulnerability Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3; 16.1.0 before 16.1.4; 15.1.0 |
| CVE-2025-61938 | 7.5 | Oct 15 | BIG-IP Advanced WAF and ASM bd process vulnerability Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3 |
| CVE-2025-55036 | 7.5 | Oct 15 | BIG-IP SSL Orchestrator vulnerability Affected: 17.1.0 before 17.1.3; 16.1.0 before 16.1.6; 15.1.0 before 15.1.10.8 |