# cve.now: F5

The newest entries naming F5 as an affected vendor (up to 200), of 432 in all, 5 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-104939](https://cve.now/CVE-2026-104939.md): NGINX Ingress Controller vulnerability (CVSS 7.5)
- [CVE-2026-101019](https://cve.now/CVE-2026-101019.md): NGINX ngx\_http\_js\_module vulnerability (CVSS 6.5)
- [CVE-2026-101025](https://cve.now/CVE-2026-101025.md): NGINX ngx\_http\_js\_module vulnerability (CVSS 5.3)
- [CVE-2026-95101](https://cve.now/CVE-2026-95101.md): NGINX ngx\_http\_v3\_module vulnerability (CVSS 5.3)
- [CVE-2026-94197](https://cve.now/CVE-2026-94197.md): NGINX Ingress Controller vulnerability (CVSS 7.5)
- [CVE-2026-96615](https://cve.now/CVE-2026-96615.md): NGINX Gateway Fabric vulnerability (CVSS 6.5)
- [CVE-2026-91184](https://cve.now/CVE-2026-91184.md): NGINX Gateway Fabric vulnerability (CVSS 8.8)
- [CVE-2026-97205](https://cve.now/CVE-2026-97205.md): NGINX ngx\_http\_core\_module vulnerability (CVSS 8.1)
- [CVE-2026-93479](https://cve.now/CVE-2026-93479.md): NGINX map directive and regex matching vulnerability (CVSS 8.1)
- [CVE-2026-97629](https://cve.now/CVE-2026-97629.md): NGINX ngx\_http\_ssl\_module vulnerability (CVSS 6.5)
- [CVE-2026-15176](https://cve.now/CVE-2026-15176.md): NGINX ngx\_http\_core\_module vulnerability (CVSS 8.1)
- [CVE-2026-94127](https://cve.now/CVE-2026-94127.md): BIG-IP APM OAuth vulnerability (CVSS 9.8, KEV)
- [CVE-2026-90439](https://cve.now/CVE-2026-90439.md): NGINX ngx\_http\_v3\_module vulnerability (CVSS 6.5)
- [CVE-2026-78222](https://cve.now/CVE-2026-78222.md): NGINX ngx\_http\_js\_module vulnerability (CVSS 7.5)
- [CVE-2026-78689](https://cve.now/CVE-2026-78689.md): NGINX ngx\_http\_js\_module vulnerablility (CVSS 8.1)
- [CVE-2026-77180](https://cve.now/CVE-2026-77180.md): NGINX Ingress Controller vulnerability (CVSS 8.3)
- [CVE-2026-66362](https://cve.now/CVE-2026-66362.md): NGF vulnerability (CVSS 8.1)
- [CVE-2026-18329](https://cve.now/CVE-2026-18329.md): NGINX ngx\_http\_js\_module vulnerability (CVSS 8.2)
- [CVE-2026-66842](https://cve.now/CVE-2026-66842.md): BIG-IP and BIG-IQ Configuration utility vulnerability (CVSS 8.8)
- [CVE-2026-63020](https://cve.now/CVE-2026-63020.md): BIG-IP Configuration utility vulnerability (CVSS 3.1)
- [CVE-2026-60005](https://cve.now/CVE-2026-60005.md): NGINX ngx\_http\_slice\_module vulnerability (CVSS 8.2)
- [CVE-2026-60065](https://cve.now/CVE-2026-60065.md): NGINX Plus ngx\_stream\_mqtt\_filter\_module vulnerability (CVSS 3.7)
- [CVE-2026-56434](https://cve.now/CVE-2026-56434.md): NGINX ngx\_http\_ssi\_module vulnerability (CVSS 6.5)
- [CVE-2026-42533](https://cve.now/CVE-2026-42533.md): NGINX Map directive and Regex matching vulnerability (CVSS 8.1)
- [CVE-2026-60062](https://cve.now/CVE-2026-60062.md): NGINX Agent Vulnerability (CVSS 6.4)
- [CVE-2026-52865](https://cve.now/CVE-2026-52865.md): NGINX Ingress Controller vulnerability (CVSS 6.5)
- [CVE-2026-55723](https://cve.now/CVE-2026-55723.md): NGINX Ingress Controller vulnerability (CVSS 8.3)
- [CVE-2026-59762](https://cve.now/CVE-2026-59762.md): BIG-IP HTTP/2 vulnerability (CVSS 7.5)
- [CVE-2026-32682](https://cve.now/CVE-2026-32682.md): NGINX Gateway Fabric vulnerability (CVSS 6.5)
- [CVE-2026-50107](https://cve.now/CVE-2026-50107.md): NGINX Gateway Fabric vulnerability (CVSS 8.1)
- [CVE-2026-11311](https://cve.now/CVE-2026-11311.md): NGINX Gateway Fabric vulnerability (CVSS 8.1)
- [CVE-2026-48142](https://cve.now/CVE-2026-48142.md): NGINX ngx\_http\_charset\_module vulnerability (CVSS 4.8)
- [CVE-2026-42055](https://cve.now/CVE-2026-42055.md): NGINX ngx\_http\_proxy\_v2\_module and ngx\_http\_grpc\_module vulnerability (CVSS 8.1)
- [CVE-2026-42530](https://cve.now/CVE-2026-42530.md): NGINX Open-Source ngx\_http\_v3\_module vulnerability (CVSS 8.1)
- [CVE-2026-9256](https://cve.now/CVE-2026-9256.md): NGINX ngx\_http\_rewrite\_module vulnerability (CVSS 8.1)
- [CVE-2026-8711](https://cve.now/CVE-2026-8711.md): NGINX JavaScript vulnerability (CVSS 8.1)
- [CVE-2026-42926](https://cve.now/CVE-2026-42926.md): NGINX ngx\_http\_proxy\_v2\_module vulnerability (CVSS 5.8)
- [CVE-2026-40460](https://cve.now/CVE-2026-40460.md): NGINX ngx\_quic\_module vulnerability (CVSS 6.5)
- [CVE-2026-42946](https://cve.now/CVE-2026-42946.md): NGINX ngx\_http\_scgi\_module and ngx\_http\_uwsgi\_module vulnerability (CVSS 6.5)
- [CVE-2026-42934](https://cve.now/CVE-2026-42934.md): NGINX ngx\_http\_charset\_module vulnerability (CVSS 4.8)
- [CVE-2026-42945](https://cve.now/CVE-2026-42945.md): NGINX ngx\_http\_rewrite\_module vulnerability (CVSS 8.1)
- [CVE-2026-40701](https://cve.now/CVE-2026-40701.md): NGINX ngx\_http\_ssl\_module vulnerability (CVSS 4.8)
- [CVE-2026-40423](https://cve.now/CVE-2026-40423.md): BIG-IP SIP profile vulnerability (CVSS 7.5)
- [CVE-2026-42930](https://cve.now/CVE-2026-42930.md): Appliance mode iControl REST vulnerability (CVSS 8.7)
- [CVE-2026-24464](https://cve.now/CVE-2026-24464.md): Appliance mode iControl REST vulnerability (CVSS 6.8)
- [CVE-2026-39458](https://cve.now/CVE-2026-39458.md): BIG-IP DNS Cache vulnerability (CVSS 7.5)
- [CVE-2026-41959](https://cve.now/CVE-2026-41959.md): iControl and tmsh REST vulnerability (CVSS 6.5)
- [CVE-2026-42406](https://cve.now/CVE-2026-42406.md): BIG-IP and BIG-IQ privilege escalation vulnerability (CVSS 8.7)
- [CVE-2026-42058](https://cve.now/CVE-2026-42058.md): BIG-IP iControl REST vulnerability (CVSS 4.3)
- [CVE-2026-32643](https://cve.now/CVE-2026-32643.md): BIG-IP and BIG-IQ privilege escalation vulnerability (CVSS 8.7)
- [CVE-2026-42937](https://cve.now/CVE-2026-42937.md): iControl REST and tmsh vulnerability (CVSS 6.5)
- [CVE-2026-39455](https://cve.now/CVE-2026-39455.md): BIG-IP Configuration utility vulnerability (CVSS 7.5)
- [CVE-2026-32673](https://cve.now/CVE-2026-32673.md): BIG-IP scripted monitor vulnerability (CVSS 6.5)
- [CVE-2026-41217](https://cve.now/CVE-2026-41217.md): BIG-IP tmsh vulnerability (CVSS 6.0)
- [CVE-2026-34176](https://cve.now/CVE-2026-34176.md): Knowledge Appliance mode iControl REST vulnerability (CVSS 8.7)
- [CVE-2026-42063](https://cve.now/CVE-2026-42063.md): iControl SOAP vulnerability (CVSS 4.9)
- [CVE-2026-41225](https://cve.now/CVE-2026-41225.md): iControl REST vulnerability (CVSS 7.2)
- [CVE-2026-39459](https://cve.now/CVE-2026-39459.md): iControl REST and tmsh vulnerability (CVSS 7.2)
- [CVE-2026-41953](https://cve.now/CVE-2026-41953.md): BIG-IP Privilege Escalation vulnerability (CVSS 8.7)
- [CVE-2026-40631](https://cve.now/CVE-2026-40631.md): BIG-IP iControl SOAP vulnerability (CVSS 8.7)
- [CVE-2026-40698](https://cve.now/CVE-2026-40698.md): iControl REST and TMSH vulnerability (CVSS 8.7)
- [CVE-2026-42924](https://cve.now/CVE-2026-42924.md): BIG-IP iControl SOAP vulnerability (CVSS 8.7)
- [CVE-2026-40060](https://cve.now/CVE-2026-40060.md): BIG-IP Advanced WAF and ASM vulnerability (CVSS 7.5)
- [CVE-2026-42409](https://cve.now/CVE-2026-42409.md): BIG-IP HTTP/2 vulnerability (CVSS 7.5)
- [CVE-2026-41227](https://cve.now/CVE-2026-41227.md): BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability (CVSS 7.5)
- [CVE-2026-40061](https://cve.now/CVE-2026-40061.md): iControl REST and tmsh vulnerability (CVSS 6.5)
- [CVE-2026-35062](https://cve.now/CVE-2026-35062.md): iControl SOAP vulnerability (CVSS 6.5)
- [CVE-2026-40618](https://cve.now/CVE-2026-40618.md): BIG-IP SSL/TLS vulnerability (CVSS 7.5)
- [CVE-2026-41956](https://cve.now/CVE-2026-41956.md): BIG-IP TMM Vulnerability (CVSS 7.5)
- [CVE-2026-42920](https://cve.now/CVE-2026-42920.md): BIG-IP DTLS Vulnerability (CVSS 7.5)
- [CVE-2026-40629](https://cve.now/CVE-2026-40629.md): BIG-IP SSL/TLS vulnerability (CVSS 7.5)
- [CVE-2026-42919](https://cve.now/CVE-2026-42919.md): F5 BIG-IP Appliance Mode Vulnerability (CVSS 6.7)
- [CVE-2026-41218](https://cve.now/CVE-2026-41218.md): BIG-IP PEM iRules vulnerability (CVSS 7.5)
- [CVE-2026-42781](https://cve.now/CVE-2026-42781.md): BIG-IP FastL4 virtual server vulnerability (CVSS 6.5)
- [CVE-2026-20916](https://cve.now/CVE-2026-20916.md): BIG-IQ iControl REST vulnerability (CVSS 8.1)
- [CVE-2026-41957](https://cve.now/CVE-2026-41957.md): BIG-IP and BIG-IQ Configuration utility vulnerability (CVSS 8.8)
- [CVE-2026-42408](https://cve.now/CVE-2026-42408.md): BIG-IP DNS tmsh vulnerability (CVSS 4.4)
- [CVE-2026-40067](https://cve.now/CVE-2026-40067.md): BIG-IP APM Vulnerability (CVSS 7.5)
- [CVE-2026-40699](https://cve.now/CVE-2026-40699.md): BIG-IP Configuration utility vulnerability (CVSS 6.5)
- [CVE-2026-34019](https://cve.now/CVE-2026-34019.md): BIG-IP BFD vulnerability (CVSS 6.3)
- [CVE-2026-42780](https://cve.now/CVE-2026-42780.md): BIG-IP SSL Orchestrator vulnerability (CVSS 4.9)
- [CVE-2026-41219](https://cve.now/CVE-2026-41219.md): BIG-IP QKView vulnerability (CVSS 6.5)
- [CVE-2026-40462](https://cve.now/CVE-2026-40462.md): iControl REST and tmsh vulnerability (CVSS 6.5)
- [CVE-2026-28758](https://cve.now/CVE-2026-28758.md): BIG-IP iControl REST vulnerability (CVSS 4.4)
- [CVE-2026-41954](https://cve.now/CVE-2026-41954.md): iControl REST and tmsh vulnerability (CVSS 4.9)
- [CVE-2026-40435](https://cve.now/CVE-2026-40435.md): BIG-IP httpd access control vulnerability (CVSS 5.3)
- [CVE-2026-40703](https://cve.now/CVE-2026-40703.md): BIG-IP Configuration utility CSRF vulnerability (CVSS 5.4)
- [CVE-2026-27651](https://cve.now/CVE-2026-27651.md): NGINX ngx\_mail\_auth\_http\_module vulnerability (CVSS 7.5)
- [CVE-2026-27654](https://cve.now/CVE-2026-27654.md): NGINX ngx\_http\_dav\_module vulnerability (CVSS 8.2)
- [CVE-2026-28755](https://cve.now/CVE-2026-28755.md): NGINX ngx\_stream\_ssl\_module vulnerability (CVSS 5.4)
- [CVE-2026-28753](https://cve.now/CVE-2026-28753.md): NGINX ngx\_mail\_proxy\_module vulnerability (CVSS 3.7)
- [CVE-2026-32647](https://cve.now/CVE-2026-32647.md): NGINX ngx\_http\_mp4\_module vulnerability (CVSS 7.8)
- [CVE-2026-27784](https://cve.now/CVE-2026-27784.md): NGINX ngx\_http\_mp4\_module vulnerability (CVSS 7.8)
- [CVE-2026-2507](https://cve.now/CVE-2026-2507.md): BIG-IP TMM Vulnerability (CVSS 7.5)
- [CVE-2026-22549](https://cve.now/CVE-2026-22549.md): BIG-IP Container Ingress Services vulnerability (CVSS 4.9)
- [CVE-2026-1642](https://cve.now/CVE-2026-1642.md): NGINX vulnerability (CVSS 5.9)
- [CVE-2026-22548](https://cve.now/CVE-2026-22548.md): BIG-IP Advanced WAF and ASM vulnerability (CVSS 5.9)
- [CVE-2026-20732](https://cve.now/CVE-2026-20732.md): BIG-IP Configuration utility vulnerability (CVSS 3.1)
- [CVE-2026-20730](https://cve.now/CVE-2026-20730.md): BIG-IP Edge Client for Windows vulnerability (CVSS 3.3)
- [CVE-2025-14727](https://cve.now/CVE-2025-14727.md): NGINX Ingress Controller vulnerability (CVSS 8.3)
- [CVE-2025-61990](https://cve.now/CVE-2025-61990.md): TMM vulnerability (CVSS 7.5)
- [CVE-2025-57780](https://cve.now/CVE-2025-57780.md): F5OS Vulnerability (CVSS 8.8)
- [CVE-2025-61933](https://cve.now/CVE-2025-61933.md): BIG-IP APM cross-site scripting (XSS) vulnerability (CVSS 6.1)
- [CVE-2025-58071](https://cve.now/CVE-2025-58071.md): BIG-IP IPSec vulnerability (CVSS 7.5)
- [CVE-2025-61935](https://cve.now/CVE-2025-61935.md): BIG-IP Advanced WAF and ASM vulnerability (CVSS 7.5)
- [CVE-2025-53860](https://cve.now/CVE-2025-53860.md): F5OS-A FIPS HSM vulnerability (CVSS 4.1)
- [CVE-2025-60015](https://cve.now/CVE-2025-60015.md): F5OS out-of-bounds write vulnerability (CVSS 5.7)
- [CVE-2025-54755](https://cve.now/CVE-2025-54755.md): BIG-IP Configuration utility vulnerability (CVSS 4.9)
- [CVE-2025-59483](https://cve.now/CVE-2025-59483.md): BIG-IP Configuration utility and tmsh vulnerability (CVSS 6.5)
- [CVE-2025-61974](https://cve.now/CVE-2025-61974.md): BIG-IP SSL/TLS vulnerability (CVSS 7.5)
- [CVE-2025-59481](https://cve.now/CVE-2025-59481.md): BIG-IP iControl REST and tmsh vulnerability (CVSS 8.7)
- [CVE-2025-61960](https://cve.now/CVE-2025-61960.md): BIG-IP APM portal access vulnerability (CVSS 7.5)
- [CVE-2025-61955](https://cve.now/CVE-2025-61955.md): F5OS vulnerability (CVSS 8.8)
- [CVE-2025-54854](https://cve.now/CVE-2025-54854.md): BigIP APM Vulnerability (CVSS 7.5)
- [CVE-2025-61958](https://cve.now/CVE-2025-61958.md): BIG-IP TMSH vulnerability (CVSS 8.7)
- [CVE-2025-53521](https://cve.now/CVE-2025-53521.md): BigIP APM Vulnerability (CVSS 9.8, KEV)
- [CVE-2025-58096](https://cve.now/CVE-2025-58096.md): BIG-IP TMM vulnerability (CVSS 7.5)
- [CVE-2025-54858](https://cve.now/CVE-2025-54858.md): BIG-IP Advanced WAF and ASM vulnerability (CVSS 7.5)
- [CVE-2025-53868](https://cve.now/CVE-2025-53868.md): BIG-IP SCP and SFTP vulnerability (CVSS 8.7)
- [CVE-2025-58120](https://cve.now/CVE-2025-58120.md): BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability (CVSS 7.5)
- [CVE-2025-60013](https://cve.now/CVE-2025-60013.md): F5OS-A FIPS HSM password vulnerability (CVSS 4.6)
- [CVE-2025-61951](https://cve.now/CVE-2025-61951.md): BIG-IP DTLS 1.2 Vulnerability (CVSS 7.5)
- [CVE-2025-53856](https://cve.now/CVE-2025-53856.md): TMM vulnerability (CVSS 7.5)
- [CVE-2025-54479](https://cve.now/CVE-2025-54479.md): BIG-IP PEM vulnerability (CVSS 7.5)
- [CVE-2025-59778](https://cve.now/CVE-2025-59778.md): VELOS partition container network vulnerability (CVSS 7.5)
- [CVE-2025-54805](https://cve.now/CVE-2025-54805.md): TMM Vulnerability (CVSS 6.5)
- [CVE-2025-55670](https://cve.now/CVE-2025-55670.md): BIG-IP Next (CNF, SPK, and Kubernetes) vulnerability (CVSS 6.5)
- [CVE-2025-41430](https://cve.now/CVE-2025-41430.md): BIG-IP SSL Orchestrator vulnerability (CVSS 7.5)
- [CVE-2025-61938](https://cve.now/CVE-2025-61938.md): BIG-IP Advanced WAF and ASM bd process vulnerability (CVSS 7.5)
- [CVE-2025-58424](https://cve.now/CVE-2025-58424.md): BIG-IP TMM vulnerability (CVSS 5.3)
- [CVE-2025-55036](https://cve.now/CVE-2025-55036.md): BIG-IP SSL Orchestrator vulnerability (CVSS 7.5)
- [CVE-2025-59781](https://cve.now/CVE-2025-59781.md): BIG-IP DNS cache vulnerability (CVSS 7.5)
- [CVE-2025-47150](https://cve.now/CVE-2025-47150.md): F5OS SNMP vulnerability (CVSS 6.5)
- [CVE-2025-46706](https://cve.now/CVE-2025-46706.md): BIG-IP iRules vulnerability (CVSS 7.5)
- [CVE-2025-55669](https://cve.now/CVE-2025-55669.md): BIG-IP HTTP/2 vulnerability (CVSS 7.5)
- [CVE-2025-48008](https://cve.now/CVE-2025-48008.md): BIG-IP MPTCP vulnerability (CVSS 7.5)
- [CVE-2025-58153](https://cve.now/CVE-2025-58153.md): BIG-IP HSB vulnerability (CVSS 5.9)
- [CVE-2025-60016](https://cve.now/CVE-2025-60016.md): BIG-IP SSL/TLS vulnerability (CVSS 7.5)
- [CVE-2025-59478](https://cve.now/CVE-2025-59478.md): BIG-IP AFM DoS protection profile vulnerability (CVSS 7.5)
- [CVE-2025-58474](https://cve.now/CVE-2025-58474.md): BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability (CVSS 5.3)
- [CVE-2025-47148](https://cve.now/CVE-2025-47148.md): BIG-IP APM and SSL Orchestrator vulnerability (CVSS 6.5)
- [CVE-2025-59269](https://cve.now/CVE-2025-59269.md): BIG-IP Configuration utility XSS vulnerability (CVSS 6.1)
- [CVE-2025-59268](https://cve.now/CVE-2025-59268.md): BIG-IP Configuration utility vulnerability (CVSS 5.3)
- [CVE-2025-53474](https://cve.now/CVE-2025-53474.md): BIG-IP iRules vulnerability (CVSS 7.5)
- [CVE-2025-53859](https://cve.now/CVE-2025-53859.md): NGINX ngx\_mail\_smtp\_module vulnerability (CVSS 3.7)
- [CVE-2025-54500](https://cve.now/CVE-2025-54500.md): HTTP/2 Vulnerability (CVSS 5.3)
- [CVE-2025-48500](https://cve.now/CVE-2025-48500.md): BIG-IP APM VPN web client for macOS vulnerability (CVSS 7.3)
- [CVE-2025-46405](https://cve.now/CVE-2025-46405.md): BIG-IP APM vulnerability (CVSS 7.5)
- [CVE-2025-52585](https://cve.now/CVE-2025-52585.md): BIG-IP Client SSL profile vulnerability (CVSS 7.5)
- [CVE-2025-54809](https://cve.now/CVE-2025-54809.md): F5 Access for Android vulnerability (CVSS 7.4)
- [CVE-2025-41431](https://cve.now/CVE-2025-41431.md): TMM Vulnerability (CVSS 7.5)
- [CVE-2025-31644](https://cve.now/CVE-2025-31644.md): Appliance mode BIG-IP iControl REST and tmsh vulnerability (CVSS 8.7)
- [CVE-2025-35995](https://cve.now/CVE-2025-35995.md): BIG-IP PEM vulnerability (CVSS 7.5)
- [CVE-2025-36525](https://cve.now/CVE-2025-36525.md): BIG-IP APM PingAccess Virtual Server Vulnerability (CVSS 7.5)
- [CVE-2025-36504](https://cve.now/CVE-2025-36504.md): BIG-IP HTTP/2 vulnerability (CVSS 7.5)
- [CVE-2025-41414](https://cve.now/CVE-2025-41414.md): BIG-IP HTTP/2 vulnerability (CVSS 7.5)
- [CVE-2025-41433](https://cve.now/CVE-2025-41433.md): BIG-IP SIP ALG profile vulnerability (CVSS 7.5)
- [CVE-2025-46265](https://cve.now/CVE-2025-46265.md): F5OS vulnerability (CVSS 8.8)
- [CVE-2025-43878](https://cve.now/CVE-2025-43878.md): F5OS-A/C CLI vulnerability (CVSS 6.0)
- [CVE-2025-36546](https://cve.now/CVE-2025-36546.md): F5OS Appliance Mode vulnerability (CVSS 8.1)
- [CVE-2025-36557](https://cve.now/CVE-2025-36557.md): BIG-IP HTTP vulnerability (CVSS 7.5)
- [CVE-2025-41399](https://cve.now/CVE-2025-41399.md): SCTP Vulnerability (CVSS 7.5)
- [CVE-2025-1695](https://cve.now/CVE-2025-1695.md): NGINX Unit Java Vulnerability (CVSS 5.3)
- [CVE-2025-23419](https://cve.now/CVE-2025-23419.md): TLS Session Resumption Vulnerability (CVSS 4.3)
- [CVE-2025-23413](https://cve.now/CVE-2025-23413.md): BIG-IP Next Central Manager vulnerability (CVSS 4.4)
- [CVE-2025-20029](https://cve.now/CVE-2025-20029.md): BIG-IP iControl REST and tmsh vulnerability (CVSS 8.8)
- [CVE-2025-24319](https://cve.now/CVE-2025-24319.md): BIG-IP Next Central Manager vulnerability (CVSS 6.5)
- [CVE-2025-24320](https://cve.now/CVE-2025-24320.md): BIG-IP Configuration utility vulnerability (CVSS 5.1)
- [CVE-2025-24497](https://cve.now/CVE-2025-24497.md): BIG-IP PEM vulnerability (CVSS 7.5)
- [CVE-2025-24312](https://cve.now/CVE-2025-24312.md): BIG-IP AFM vulnerability (CVSS 7.5)
- [CVE-2025-22846](https://cve.now/CVE-2025-22846.md): BIG-IP SIP Vulnerability (CVSS 7.5)
- [CVE-2025-23412](https://cve.now/CVE-2025-23412.md): BIG-IP APM access profile vulnerability (CVSS 7.5)
- [CVE-2025-23239](https://cve.now/CVE-2025-23239.md): BIG-IP iControl REST vulnerability (CVSS 8.7)
- [CVE-2025-24326](https://cve.now/CVE-2025-24326.md): BIG-IP Advanced WAF/ASM BADoS vulnerability (CVSS 7.5)
- [CVE-2025-20045](https://cve.now/CVE-2025-20045.md): BIG-IP SIP MRF Vulnerability (CVSS 7.5)
- [CVE-2025-22891](https://cve.now/CVE-2025-22891.md): BIG-IP PEM Vulnerability (CVSS 7.5)
- [CVE-2025-20058](https://cve.now/CVE-2025-20058.md): BIG-IP message routing vulnerability (CVSS 7.5)
- [CVE-2025-23415](https://cve.now/CVE-2025-23415.md): BIG-IP APM Endpoint Inspection vulnerability (CVSS 3.1)
- [CVE-2025-21091](https://cve.now/CVE-2025-21091.md): BIG-IP SNMP vulnerability (CVSS 7.5)
- [CVE-2025-21087](https://cve.now/CVE-2025-21087.md): TMM Vulnerability (CVSS 7.5)
- [CVE-2024-10318](https://cve.now/CVE-2024-10318.md): NGINX OpenID Connect Vulnerability (CVSS 5.4)
- [CVE-2024-45844](https://cve.now/CVE-2024-45844.md): BIG-IP monitors vulnerability (CVSS 7.2)
- [CVE-2024-47139](https://cve.now/CVE-2024-47139.md): F5 BIG-IQ Vulnerability (CVSS 4.8)
- [CVE-2024-7634](https://cve.now/CVE-2024-7634.md): NGINX Agent Vulnerability (CVSS 4.9)
- [CVE-2024-7347](https://cve.now/CVE-2024-7347.md): NGINX MP4 module vulnerability (CVSS 4.7)
- [CVE-2024-39792](https://cve.now/CVE-2024-39792.md): NGINX Plus MQTT vulnerability (CVSS 7.5)
- [CVE-2024-37028](https://cve.now/CVE-2024-37028.md): BIG-IP Next Central Manager vulnerability (CVSS 5.3)
- [CVE-2024-39809](https://cve.now/CVE-2024-39809.md): BIG-IP Next Central Manager vulnerability (CVSS 7.5)
- [CVE-2024-41719](https://cve.now/CVE-2024-41719.md): BIG-IP Next Central Manager vulnerability (CVSS 4.2)
- [CVE-2024-41727](https://cve.now/CVE-2024-41727.md): BIG-IP TMM vulnerability (CVSS 7.5)
- [CVE-2024-41164](https://cve.now/CVE-2024-41164.md): BIG-IP MPTCP vulnerability (CVSS 5.9)
- [CVE-2024-39778](https://cve.now/CVE-2024-39778.md): BIG-IP HSB vulnerability (CVSS 7.5)
- [CVE-2024-41723](https://cve.now/CVE-2024-41723.md): BIG-IP iControl REST vulnerability (CVSS 4.3)
- [CVE-2024-34161](https://cve.now/CVE-2024-34161.md): NGINX HTTP/3 QUIC vulnerability (CVSS 5.3)
- [CVE-2024-35200](https://cve.now/CVE-2024-35200.md): NGINX HTTP/3 QUIC vulnerability (CVSS 5.3)
- [CVE-2024-32760](https://cve.now/CVE-2024-32760.md): NGINX HTTP/3 QUIC vulnerability (CVSS 6.5)
- [CVE-2024-31079](https://cve.now/CVE-2024-31079.md): NGINX HTTP/3 QUIC vulnerability (CVSS 4.8)
- [CVE-2024-32761](https://cve.now/CVE-2024-32761.md): BIG-IP TMM tenants on VELOS and rSeries vulnerability (CVSS 6.5)
- [CVE-2024-26026](https://cve.now/CVE-2024-26026.md): BIG-IP Central Manager SQL Injection (CVSS 7.5)
- [CVE-2024-21793](https://cve.now/CVE-2024-21793.md): BIG-IP Central Manager OData Injection Vulnerability (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/f5
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.