Advisories · Technology

F5 BIG-IQ.

Every CVE that names F5 BIG-IQ among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66842 CVE record

CVSS 8.7 High

BIG-IP and BIG-IQ Configuration utility vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Server-side request forgery (SSRF)
Not analysed yet 2 Sept 2026
CVE-2026-41959 CVE record

CVSS 7.1 High

iControl and tmsh REST vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Broken access control
Not analysed yet 13 May 2026
CVE-2026-42406 CVE record

CVSS 8.5 High

BIG-IP and BIG-IQ privilege escalation vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Privilege escalation
Not analysed yet 13 May 2026
CVE-2026-32643 CVE record

CVSS 8.5 High

BIG-IP and BIG-IQ privilege escalation vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Privilege escalation
Not analysed yet 13 May 2026
CVE-2026-42937 CVE record

CVSS 7.1 High

iControl REST and tmsh vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Broken access control
Not analysed yet 13 May 2026
CVE-2026-40698 CVE record

CVSS 8.5 High

iControl REST and TMSH vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Command injection
Not analysed yet 13 May 2026
CVE-2026-20916 CVE record

CVSS 7.2 High

BIG-IQ iControl REST vulnerability
- F5 BIG-IQ
- Path traversal
Not analysed yet 13 May 2026
CVE-2026-41957 CVE record

CVSS 8.7 High

BIG-IP and BIG-IQ Configuration utility vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Insecure deserialization
Not analysed yet 13 May 2026
CVE-2026-41219 CVE record

CVSS 7.1 High

BIG-IP QKView vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Information disclosure
Not analysed yet 13 May 2026
CVE-2026-41954 CVE record

CVSS 6.9 Medium

iControl REST and tmsh vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Information disclosure
Not analysed yet 13 May 2026
CVE-2024-47139 CVE record

CVSS 4.8 Medium

F5 BIG-IQ Vulnerability
- F5 BIG-IQ
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2024
CVE-2024-21782 CVE record

CVSS 6.7 Medium

BIG-IP and BIG-IQ secure copy vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Command injection
Not analysed yet 14 Feb 2024
CVE-2023-43485 CVE record

CVSS 5.5 Medium

BIGIP and BIG-IQ TACACS+ audit log Vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Information disclosure
Not analysed yet 10 Oct 2023
CVE-2023-41964 CVE record

CVSS 4.3 Medium

BIG-IP and BIG-IQ Database Variable vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Information disclosure
Not analysed yet 10 Oct 2023
CVE-2023-38419 CVE record

CVSS 4.3 Medium

BIG-IP and BIG-IQ iControl SOAP vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- CWE-755
Not analysed yet 2 Aug 2023
CVE-2023-29240 CVE record

CVSS 5.4 Medium

BIG-IQ iControl REST Vulnerability
- F5 BIG-IQ
- Broken access control
Not analysed yet 3 May 2023
CVE-2022-41770 CVE record

CVSS 6.5 Medium

BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770
- F5 BIG-IP
- F5 BIG-IQ
- Denial of service
Not analysed yet 19 Oct 2022
CVE-2022-41694 CVE record

CVSS 4.9 Medium

BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694
- F5 BIG-IP
- F5 BIG-IQ
- CWE-20
Not analysed yet 19 Oct 2022
CVE-2019-6688 CVE record

F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…
- F5 BIG-IP
- F5 BIG-IQ
Not analysed yet 23 Dec 2019
CVE-2019-6665 CVE record

F5 BIG-IP ASM: On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1…
- F5 BIG-IP ASM
- F5 BIG-IQ
Not analysed yet 27 Nov 2019