Exploited vulnerabilities
F5
8 F5 vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue8
Last 12 months2
In ransomware campaigns4
Last addition22 September 2026
The vulnerabilities8
- 22 September 2026CVE-2026-94127BIG-IP APMF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
- 27 March 2026CVE-2025-53521BIG-IPF5 BIG-IP Stack-Based Buffer Overflow Vulnerability
- 31 October 2023CVE-2023-46748BIG-IP Configuration UtilityF5 BIG-IP Configuration Utility SQL Injection Vulnerability
- 31 October 2023CVE-2023-46747BIG-IP Configuration UtilityF5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityRansomware
- 10 May 2022CVE-2022-1388BIG-IPF5 BIG-IP Missing Authentication VulnerabilityRansomware
- 18 January 2022CVE-2021-22991BIG-IP Traffic Management MicrokernelF5 BIG-IP Traffic Management Microkernel Buffer Overflow
- 3 November 2021CVE-2021-22986BIG-IP and BIG-IQ Centralized ManagementF5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityRansomware
- 3 November 2021CVE-2020-5902BIG-IPF5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, F5 included.