Veille CVE

Recherche « F5 BIG-IP Next CNF »

5 CVE

  1. CVE-2026-59762 7.5 Élevée

    F5 BIG-IP · F5 BIG-IP Next for Kubernetes · F5 BIG-IP Next SPK · F5 BIG-IP Next CNF

    When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.   Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote, unauthenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  2. CVE-2026-42409 7.5 Élevée

    F5 BIG-IP · F5 BIG-IP Next SPK · F5 BIG-IP Next CNF · F5 BIG-IP Next for Kubernetes

    When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  3. CVE-2026-41956 7.5 Élevée

    F5 BIG-IP · F5 BIG-IP Next CNF · F5 BIG-IP Next for Kubernetes · F5 big-ip access policy manager

    When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  4. CVE-2026-40629 7.5 Élevée

    F5 BIG-IP · F5 BIG-IP Next SPK · F5 BIG-IP Next CNF · F5 BIG-IP Next for Kubernetes

    When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  5. CVE-2026-40618 7.5 Élevée

    F5 BIG-IP · F5 BIG-IP Next SPK · F5 BIG-IP Next CNF · F5 BIG-IP Next for Kubernetes

    When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist Technology (QAT) or on BIG-IP hardware platforms with the database variable crypto.hwacceleration set to disabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.