netVigilance Vulnerability intelligence since 2004

F5

8 F5 vulnerabilities with confirmed exploitation in the wild, as published by CISA; 8 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for F5
Vulnerability Status
overdue 11d2026-09-25 CVE-2026-94127 F5 / BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability 2026-09-22 9.3 past due
overdue 190d2026-03-30 CVE-2025-53521 F5 / BIG-IP F5 BIG-IP Stack-Based Buffer Overflow Vulnerability 2026-03-27 9.3 past due
overdue 1050d2023-11-21 CVE-2023-46748 F5 / BIG-IP Configuration Utility F5 BIG-IP Configuration Utility SQL Injection Vulnerability 2023-10-31 8.8 past due
overdue 1050d2023-11-21 CVE-2023-46747 F5 / BIG-IP Configuration Utility F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability 2023-10-31 9.8 past dueransomware
overdue 1589d2022-05-31 CVE-2022-1388 F5 / BIG-IP F5 BIG-IP Missing Authentication Vulnerability 2022-05-10 9.8 past dueransomware
overdue 1708d2022-02-01 CVE-2021-22991 F5 / BIG-IP Traffic Management Microkernel F5 BIG-IP Traffic Management Microkernel Buffer Overflow 2022-01-18 9.8 past due
overdue 1784d2021-11-17 CVE-2021-22986 F5 / BIG-IP and BIG-IQ Centralized Management F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1617d2022-05-03 CVE-2020-5902 F5 / BIG-IP F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability 2021-11-03 9.8 past dueransomware