F5 BIG-IP vulnerabilities

CVEs per yearBy the year they were published

1. 201928
2. 20203
3. 202251
4. 202337
5. 202428
6. 202561
7. 202651

Known exploitedNewest addition to KEV first

• CVE-2026-94127

  BIG-IP APM OAuth vulnerability

  F5 · BIG-IP

  ExploitedCritical9.3
• CVE-2025-53521

  BigIP APM Vulnerability

  F5 · BIG-IP

  ExploitedCritical9.3
• CVE-2023-46748

  BIG-IP Configuration utility authenticated SQL injection vulnerability

  F5 · BIG-IP

  ExploitedHigh8.8
• CVE-2023-46747

  BIG-IP Configuration utility unauthenticated remote code execution vulnerability

  F5 · BIG-IP

  ExploitedCritical9.8
• CVE-2022-1388

  On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all…

  F5 · BIG-IP

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-94127

  BIG-IP APM OAuth vulnerability

  F5 · BIG-IP

  ExploitedCritical9.3
• CVE-2026-66842

  BIG-IP and BIG-IQ Configuration utility vulnerability

  F5 · BIG-IP

  High8.7
• CVE-2026-63020

  BIG-IP Configuration utility vulnerability

  F5 · BIG-IP

  Low2.3
• CVE-2026-59762

  BIG-IP HTTP/2 vulnerability

  F5 · BIG-IP

  High8.7
• CVE-2026-40423

  BIG-IP SIP profile vulnerability

  F5 · BIG-IP

  High8.7
• CVE-2026-42930

  Appliance mode iControl REST vulnerability

  F5 · BIG-IP

  High8.5
• CVE-2026-24464

  Appliance mode iControl REST vulnerability

  F5 · BIG-IP

  Medium6.9
• CVE-2026-39458

  BIG-IP DNS Cache vulnerability

  F5 · BIG-IP

  High8.7
• CVE-2026-41959

  iControl and tmsh REST vulnerability

  F5 · BIG-IP

  High7.1
• CVE-2026-42406

  BIG-IP and BIG-IQ privilege escalation vulnerability

  F5 · BIG-IP

  High8.5