Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: f5 Clear
ID Title
CVE-2026-40060 Vulnerability in f5 (CVE-2026-40060)
vulnerability in f5 (CVE-2026-40060). Risk of unauthorized operations or information disclosure.
CVE-2026-40061 Command Injection in f5 (CVE-2026-40061)
command injection in f5 (CVE-2026-40061). Confidential information can be exposed externally.
CVE-2026-40067 Vulnerability in f5 (CVE-2026-40067)
vulnerability in f5 (CVE-2026-40067). Risk of unauthorized operations or information disclosure.
CVE-2026-40423 Vulnerability in f5 (CVE-2026-40423)
vulnerability in f5 (CVE-2026-40423). Risk of unauthorized operations or information disclosure.
CVE-2026-40435 Vulnerability in f5 (CVE-2026-40435)
vulnerability in f5 (CVE-2026-40435). Risk of unauthorized operations or information disclosure.
CVE-2026-40460 Vulnerability in nginx (CVE-2026-40460)
vulnerability in nginx (CVE-2026-40460). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.30.1` or later.
CVE-2026-40462 Vulnerability in f5 (CVE-2026-40462)
vulnerability in f5 (CVE-2026-40462). Confidential information can be exposed externally.
CVE-2026-39455 Vulnerability in f5 (CVE-2026-39455)
vulnerability in f5 (CVE-2026-39455). Risk of unauthorized operations or information disclosure.
CVE-2026-39458 Vulnerability in f5 (CVE-2026-39458)
vulnerability in f5 (CVE-2026-39458). Risk of unauthorized operations or information disclosure.
CVE-2026-39459 Vulnerability in f5 (CVE-2026-39459)
vulnerability in f5 (CVE-2026-39459). Successful exploitation can lead to full system takeover.
CVE-2026-35062 Vulnerability in f5 (CVE-2026-35062)
vulnerability in f5 (CVE-2026-35062). Confidential information can be exposed externally.
CVE-2026-32643 Vulnerability in f5 (CVE-2026-32643)
vulnerability in f5 (CVE-2026-32643). Confidential information can be exposed externally.
CVE-2026-32673 Vulnerability in f5 (CVE-2026-32673)
vulnerability in f5 (CVE-2026-32673). Confidential information can be exposed externally.
CVE-2026-34019 Vulnerability in f5 (CVE-2026-34019)
vulnerability in f5 (CVE-2026-34019). Risk of unauthorized operations or information disclosure.
CVE-2026-34176 OS Command Injection in f5 (CVE-2026-34176)
OS command injection in f5 (CVE-2026-34176). Confidential information can be exposed externally.
CVE-2026-28758 Vulnerability in f5 (CVE-2026-28758)
vulnerability in f5 (CVE-2026-28758). Confidential information can be exposed externally.
CVE-2026-20916 Path Traversal in f5 (CVE-2026-20916)
path traversal in f5 (CVE-2026-20916). Data can be tampered with by attackers.
CVE-2026-24464 Vulnerability in path-traversal (CVE-2026-24464)
vulnerability in path-traversal (CVE-2026-24464). Data can be tampered with by attackers.
CVE-2025-53521 KEV [KEV] Vulnerability in F5 big-ip (CVE-2025-53521)
vulnerability in F5 big-ip (CVE-2025-53521). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-27654 Vulnerability in nginx (CVE-2026-27654)
vulnerability in nginx (CVE-2026-27654). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
CVE-2026-27784 Vulnerability in nginx-gateway (CVE-2026-27784)
vulnerability in nginx-gateway (CVE-2026-27784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
CVE-2026-32647 Out-of-Bounds Read in nginx-gateway (CVE-2026-32647)
vulnerability in nginx-gateway (CVE-2026-32647). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
CVE-2026-27651 Vulnerability in nginx-gateway (CVE-2026-27651)
vulnerability in nginx-gateway (CVE-2026-27651). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
CVE-2023-46748 KEV [KEV] SQL Injection in F5 big-ip-configuration-utility (CVE-2023-46748)
SQL injection in F5 big-ip-configuration-utility (CVE-2023-46748). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-46747 KEV [KEV] Vulnerability in F5 big-ip-configuration-utility (CVE-2023-46747)
vulnerability in F5 big-ip-configuration-utility (CVE-2023-46747). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-44487 KEV [KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
CVE-2022-1388 KEV [KEV] Vulnerability in F5 big-ip (CVE-2022-1388)
vulnerability in F5 big-ip (CVE-2022-1388). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-22991 KEV [KEV] Buffer Overflow in F5 big-ip-traffic-management-microkernel (CVE-2021-22991)
vulnerability in F5 big-ip-traffic-management-microkernel (CVE-2021-22991). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-40438 KEV [KEV] SSRF (Server-Side Request Forgery) in Apache resf (CVE-2021-40438)
SSRF in Apache resf (CVE-2021-40438). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2020-5902 KEV [KEV] Path Traversal in F5 big-ip (CVE-2020-5902)
path traversal in F5 big-ip (CVE-2020-5902). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-22986 KEV [KEV] Authorization Flaw in F5 big-ip-and-big-iq-centralized-management (CVE-2021-22986)
vulnerability in F5 big-ip-and-big-iq-centralized-management (CVE-2021-22986). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-0301 Vulnerability in f5 (CVE-2017-0301)
vulnerability in f5 (CVE-2017-0301). Successful exploitation can lead to full system takeover.
CVE-2017-0304 SQL Injection in sqli (CVE-2017-0304)
SQL injection in sqli (CVE-2017-0304). Risk of unauthorized operations or information disclosure.
CVE-2017-6129 Vulnerability in f5 (CVE-2017-6129)
vulnerability in f5 (CVE-2017-6129). Risk of unauthorized operations or information disclosure.
CVE-2017-6132 Vulnerability in f5 (CVE-2017-6132)
vulnerability in f5 (CVE-2017-6132). Risk of unauthorized operations or information disclosure.
CVE-2017-6133 Vulnerability in dos (CVE-2017-6133)
vulnerability in dos (CVE-2017-6133). Risk of unauthorized operations or information disclosure.
CVE-2017-6134 Vulnerability in f5 (CVE-2017-6134)
vulnerability in f5 (CVE-2017-6134). Risk of unauthorized operations or information disclosure.
CVE-2017-6135 Vulnerability in f5 (CVE-2017-6135)
vulnerability in f5 (CVE-2017-6135). Risk of unauthorized operations or information disclosure.
CVE-2017-6136 Vulnerability in f5 (CVE-2017-6136)
vulnerability in f5 (CVE-2017-6136). Risk of unauthorized operations or information disclosure.
CVE-2017-6138 Vulnerability in f5 (CVE-2017-6138)
vulnerability in f5 (CVE-2017-6138). Risk of unauthorized operations or information disclosure.
CVE-2017-6139 Vulnerability in f5 (CVE-2017-6139)
vulnerability in f5 (CVE-2017-6139). Confidential information can be exposed externally.
CVE-2017-6140 Vulnerability in f5 (CVE-2017-6140)
vulnerability in f5 (CVE-2017-6140). Risk of unauthorized operations or information disclosure.
CVE-2017-6151 Vulnerability in f5 (CVE-2017-6151)
vulnerability in f5 (CVE-2017-6151). Risk of unauthorized operations or information disclosure.
CVE-2017-6164 Vulnerability in dos (CVE-2017-6164)
vulnerability in dos (CVE-2017-6164). Successful exploitation can lead to full system takeover.
CVE-2017-6167 Vulnerability in f5 (CVE-2017-6167)
vulnerability in f5 (CVE-2017-6167). Successful exploitation can lead to full system takeover.
CVE-2017-6166 Vulnerability in f5 (CVE-2017-6166)
vulnerability in f5 (CVE-2017-6166). Risk of unauthorized operations or information disclosure.
CVE-2017-6168 Vulnerability in f5 (CVE-2017-6168)
vulnerability in f5 (CVE-2017-6168). Confidential information can be exposed externally. Mitigation: upgrade to `11.6.2` or later.
CVE-2017-0303 Vulnerability in f5 (CVE-2017-0303)
vulnerability in f5 (CVE-2017-0303). Risk of unauthorized operations or information disclosure.
CVE-2017-6157 Vulnerability in f5 (CVE-2017-6157)
vulnerability in f5 (CVE-2017-6157). Successful exploitation can lead to full system takeover.
CVE-2017-6159 Vulnerability in dos (CVE-2017-6159)
vulnerability in dos (CVE-2017-6159). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →