F5

9 CVEs tracked in the last 90 days

9 Total CVEs

0 Critical

1 High

6 Medium

2 Low

Severity Distribution

Critical 0 (0.0%)

High 1 (11.1%)

Medium 6 (66.7%)

Low 2 (22.2%)

f5 big-ip container ingress services 2

f5 big-ip advanced web application firewall 2

f5 big-ip application security manager 2

f5 big-ip access policy manager 2

f5 big-ip advanced firewall manager 1

f5 big-ip analytics 1

f5 big-ip application acceleration manager 1

f5 big-ip application visibility and reporting 1

CVE ID	Severity	CVSS	Description	Date
CVE-2026-1776	medium	—	Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulne…	Mar 10, 2026
CVE-2026-2507	high	7.5	When BIG-IP AFM or BIG-IP DDoS is provisioned, undisclosed traffic can cause TMM to terminate. Note…	Feb 18, 2026
CVE-2026-22549	medium	4.9	A vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions …	Feb 4, 2026
CVE-2026-22548	medium	5.9	When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed req…	Feb 4, 2026
CVE-2026-20732	low	3.1	A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacke…	Feb 4, 2026
CVE-2026-20730	low	3.3	A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attac…	Feb 4, 2026
CVE-2025-71144	medium	5.5	In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure context reset on …	Jan 14, 2026
CVE-2025-71125	medium	—	In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupp…	Jan 14, 2026
CVE-2025-71087	medium	—	In the Linux kernel, the following vulnerability has been resolved: iavf: fix off-by-one issues in …	Jan 13, 2026