BIG-IP
- Software type
- Network appliance
- Total vulnerabilities (90 days)
- 3
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/22/2026, BIG-IP recorded 3 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. Notably, 1 of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of BIG-IP and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-94127BIG-IP APM OAuth vulnerabilityCVE-2026-66842BIG-IP and BIG-IQ Configuration utility vulnerabilityCVE-2026-63020BIG-IP Configuration utility vulnerabilityCVE-2026-59762BIG-IP HTTP/2 vulnerabilityCVE-2026-40423BIG-IP SIP profile vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-94127BIG-IP APM OAuth vulnerability | Exploitation statusKEV | FixYes |
| SeverityCritical |
CVE-2026-66842BIG-IP and BIG-IQ Configuration utility vulnerability | Exploitation statusNot exploited | FixYes | Published09/02/2026 | SeverityHigh |
|---|
CVE-2026-63020BIG-IP Configuration utility vulnerability | Exploitation statusNot exploited | FixYes | Published09/02/2026 | SeverityLow |
|---|
CVE-2026-59762BIG-IP HTTP/2 vulnerability | Exploitation statusNot exploited | FixYes | Published07/15/2026 | SeverityHigh |
|---|
CVE-2026-40423BIG-IP SIP profile vulnerability | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-42930Appliance mode iControl REST vulnerability | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-24464Appliance mode iControl REST vulnerability | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityMedium |
|---|
CVE-2026-39458BIG-IP DNS Cache vulnerability | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-41959iControl and tmsh REST vulnerability | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-42406BIG-IP and BIG-IQ privilege escalation vulnerability | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityHigh |
|---|
262 Results | Page 1 of 27