Veille CVE

Mercredi 2 septembre 2026

2 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « F5 BIG-IP » ✕
  1. CVE-2026-66842 8.8 Élevée

    F5 BIG-IP · F5 BIG-IQ

    BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI). Impact: This vulnerability may allow an authenticated attacker with network access to the BIG-IP management interface to escalate privileges by creating administrative accounts on the BIG-IP system. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  2. CVE-2026-63020 3.1 Faible

    F5 BIG-IP · F5 big-ip access policy manager · F5 big-ip advanced firewall manager · F5 big-ip advanced web application firewall

    A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages  Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility web browser session. This is a control plane issue; there is no data plane exposure. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.