Veille CVE

Recherche « F5 BIG-IQ »

12 CVE

Critique 0 Élevée 7 Moyenne 5 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « F5 BIG-IQ » ✕
  1. CVE-2026-66842 8.8 Élevée

    F5 BIG-IP · F5 BIG-IQ

    BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI). Impact: This vulnerability may allow an authenticated attacker with network access to the BIG-IP management interface to escalate privileges by creating administrative accounts on the BIG-IP system. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  2. CVE-2026-42937 6.5 Moyenne

    F5 BIG-IP · F5 BIG-IQ · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view adjacent network information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  3. CVE-2026-42406 8.7 Élevée

    F5 BIG-IP · F5 BIG-IQ · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands.     Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  4. CVE-2026-41959 6.5 Moyenne

    F5 BIG-IP · F5 BIG-IQ · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics commands and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view the network status of destination systems.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  5. CVE-2026-41957 8.8 Élevée

    F5 BIG-IP · F5 BIG-IQ · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  6. CVE-2026-41954 4.9 Moyenne

    F5 BIG-IP · F5 BIG-IQ · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  7. CVE-2026-41219 6.5 Moyenne

    F5 BIG-IP · F5 BIG-IQ · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

  8. CVE-2026-40698 8.7 Élevée

    F5 BIG-IP · F5 BIG-IQ · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can create SNMP configuration objects through iControl REST or the TMOS shell (tmsh) resulting in privilege escalation.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  9. CVE-2026-32643 8.7 Élevée

    F5 BIG-IP · F5 BIG-IQ · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  10. CVE-2026-20916 8.1 Élevée

    F5 BIG-IQ · F5 big-iq centralized management

    An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  11. CVE-2018-14634 7.8 Élevée Exploitée

    The Linux Foundation kernel · Paloaltonetworks pan-os · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

  12. CVE-2014-0196 5.5 Moyenne Exploitée

    Linux linux kernel · Debian debian linux · Redhat enterprise linux · Redhat enterprise linux eus

    The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.