F5

182 credited records · 96 in the last 12 months · 1 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
68This week	CVE-2026-94127Weaponized	BIG-IP APM OAuth vulnerabilityf5 · big-ip access policy manager · CWE-122 pre-auth RCE Memory safety	Critical9.3	KEV	2.2%	Sep 22, 2026
35Monitor	CVE-2026-60005No exploit	NGINX ngx_http_slice_module vulnerabilityf5 · nginx gateway fabric · CWE-908 Pre-auth Memory safety	High8.8	—	0.5%	Jul 15, 2026
25Monitor	CVE-2026-60065No exploit	NGINX Plus ngx_stream_mqtt_filter_module vulnerabilityf5 · nginx gateway fabric · CWE-125 Pre-auth Memory safety	Medium6.3	—	0.4%	Jul 15, 2026
21Monitor	CVE-2026-60062No exploit	NGINX Agent Vulnerabilityf5 · nginx agent · CWE-22 Path traversal	Medium5.3	—	0.3%	Jul 15, 2026
34Monitor	CVE-2026-55723No exploit	NGINX Ingress Controller vulnerabilityf5 · nginx ingress controller · CWE-76	High8.7	—	0.5%	Jul 15, 2026
28Monitor	CVE-2026-52865No exploit	NGINX Ingress Controller vulnerabilityf5 · nginx ingress controller · CWE-476 Memory safety	High7.1	—	0.5%	Jul 15, 2026
34Monitor	CVE-2026-50107No exploit	NGINX Gateway Fabric vulnerabilityf5 · nginx gateway fabric · CWE-74	High8.6	—	0.5%	Jun 17, 2026
28Monitor	CVE-2026-32682No exploit	NGINX Gateway Fabric vulnerabilityf5 · nginx gateway fabric · CWE-129	High7.1	—	0.5%	Jun 17, 2026
34Monitor	CVE-2026-11311No exploit	NGINX Gateway Fabric vulnerabilityf5 · nginx gateway fabric · CWE-76	High8.6	—	0.6%	Jun 17, 2026
28Monitor	CVE-2026-42937No exploit	iControl REST and tmsh vulnerabilityf5 · big-ip access policy manager · CWE-732	High7.1	—	0.3%	May 13, 2026
34Monitor	CVE-2026-42930No exploit	Appliance mode iControl REST vulnerabilityf5 · big-ip access policy manager · CWE-35 Path traversal	High8.5	—	0.6%	May 13, 2026
34Monitor	CVE-2026-42920No exploit	BIG-IP DTLS Vulnerabilityf5 · big-ip access policy manager · CWE-835 Pre-auth Denial of service	High8.7	—	0.5%	May 13, 2026
28Monitor	CVE-2026-42919No exploit	F5 BIG-IP Appliance Mode Vulnerabilityf5 · big-ip access policy manager · CWE-121 Memory safety	High7.1	—	0.4%	May 13, 2026
28Monitor	CVE-2026-42781No exploit	BIG-IP FastL4 virtual server vulnerabilityf5 · big-ip access policy manager · CWE-835 Pre-auth Denial of service	High7.1	—	0.3%	May 13, 2026
27Monitor	CVE-2026-42780No exploit	BIG-IP SSL Orchestrator vulnerabilityf5 · big-ip ssl orchestrator · CWE-22 Path traversal	Medium6.9	—	1.2%	May 13, 2026
34Monitor	CVE-2026-42409No exploit	BIG-IP HTTP/2 vulnerabilityf5 · big-ip next cloud-native network functions · CWE-476 Pre-auth Memory safety	High8.7	—	0.5%	May 13, 2026
26Monitor	CVE-2026-42408No exploit	BIG-IP DNS tmsh vulnerabilityf5 · big-ip access policy manager · CWE-312 Local privilege escalation	Medium6.7	—	0.1%	May 13, 2026
34Monitor	CVE-2026-42406No exploit	BIG-IP and BIG-IQ privilege escalation vulnerabilityf5 · big-ip access policy manager · CWE-267	High8.5	—	0.3%	May 13, 2026
27Monitor	CVE-2026-42063No exploit	iControl SOAP vulnerabilityf5 · big-ip access policy manager · CWE-552	Medium6.9	—	0.4%	May 13, 2026
28Monitor	CVE-2026-41959No exploit	iControl and tmsh REST vulnerabilityf5 · big-ip access policy manager · CWE-732	High7.1	—	0.3%	May 13, 2026
34Monitor	CVE-2026-41957No exploit	BIG-IP and BIG-IQ Configuration utility vulnerabilityf5 · big-ip access policy manager · CWE-502 RCE Deserialization	High8.7	—	0.9%	May 13, 2026
34Monitor	CVE-2026-41956No exploit	BIG-IP TMM Vulnerabilityf5 · big-ip access policy manager · CWE-121 Pre-auth Memory safety	High8.7	—	0.5%	May 13, 2026
27Monitor	CVE-2026-41954No exploit	iControl REST and tmsh vulnerabilityf5 · big-ip access policy manager · CWE-200 Info leak	Medium6.9	—	0.4%	May 13, 2026
34Monitor	CVE-2026-41953No exploit	BIG-IP Privilege Escalation vulnerabilityf5 · big-ip access policy manager · CWE-77 RCE Command injection	High8.5	—	0.4%	May 13, 2026
34Monitor	CVE-2026-41227No exploit	BIG-IP HTTP/2 Layer 7 Dos Protection vulnerabilityf5 · big-ip advanced web application firewall · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	May 13, 2026

CVE-2026-94127
68This week
BIG-IP APM OAuth vulnerability
CriticalCVSS 9.3KEVWeaponizedEPSS 2%
- pre-auth RCE
- Memory safety
f5 · big-ip access policy managerSep 22, 2026
CVE-2026-60005
35Monitor
NGINX ngx_http_slice_module vulnerability
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
f5 · nginx gateway fabricJul 15, 2026
CVE-2026-60065
25Monitor
NGINX Plus ngx_stream_mqtt_filter_module vulnerability
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
- Memory safety
f5 · nginx gateway fabricJul 15, 2026
CVE-2026-60062
21Monitor
NGINX Agent Vulnerability
MediumCVSS 5.3No exploitEPSS 0%
- Path traversal
f5 · nginx agentJul 15, 2026
CVE-2026-55723
34Monitor
NGINX Ingress Controller vulnerability
HighCVSS 8.7No exploitEPSS 1%
f5 · nginx ingress controllerJul 15, 2026
CVE-2026-52865
28Monitor
NGINX Ingress Controller vulnerability
HighCVSS 7.1No exploitEPSS 1%
- Memory safety
f5 · nginx ingress controllerJul 15, 2026
CVE-2026-50107
34Monitor
NGINX Gateway Fabric vulnerability
HighCVSS 8.6No exploitEPSS 0%
f5 · nginx gateway fabricJun 17, 2026
CVE-2026-32682
28Monitor
NGINX Gateway Fabric vulnerability
HighCVSS 7.1No exploitEPSS 1%
f5 · nginx gateway fabricJun 17, 2026
CVE-2026-11311
34Monitor
NGINX Gateway Fabric vulnerability
HighCVSS 8.6No exploitEPSS 1%
f5 · nginx gateway fabricJun 17, 2026
CVE-2026-42937
28Monitor
iControl REST and tmsh vulnerability
HighCVSS 7.1No exploitEPSS 0%
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-42930
34Monitor
Appliance mode iControl REST vulnerability
HighCVSS 8.5No exploitEPSS 1%
- Path traversal
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-42920
34Monitor
BIG-IP DTLS Vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-42919
28Monitor
F5 BIG-IP Appliance Mode Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-42781
28Monitor
BIG-IP FastL4 virtual server vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-42780
27Monitor
BIG-IP SSL Orchestrator vulnerability
MediumCVSS 6.9No exploitEPSS 1%
- Path traversal
f5 · big-ip ssl orchestratorMay 13, 2026
CVE-2026-42409
34Monitor
BIG-IP HTTP/2 vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
f5 · big-ip next cloud-native network functionsMay 13, 2026
CVE-2026-42408
26Monitor
BIG-IP DNS tmsh vulnerability
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-42406
34Monitor
BIG-IP and BIG-IQ privilege escalation vulnerability
HighCVSS 8.5No exploitEPSS 0%
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-42063
27Monitor
iControl SOAP vulnerability
MediumCVSS 6.9No exploitEPSS 0%
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-41959
28Monitor
iControl and tmsh REST vulnerability
HighCVSS 7.1No exploitEPSS 0%
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-41957
34Monitor
BIG-IP and BIG-IQ Configuration utility vulnerability
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Deserialization
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-41956
34Monitor
BIG-IP TMM Vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-41954
27Monitor
iControl REST and tmsh vulnerability
MediumCVSS 6.9No exploitEPSS 0%
- Info leak
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-41953
34Monitor
BIG-IP Privilege Escalation vulnerability
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Command injection
f5 · big-ip access policy managerMay 13, 2026
CVE-2026-41227
34Monitor
BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
f5 · big-ip advanced web application firewallMay 13, 2026