Security Digest
F5: known exploited vulnerabilities
4 F5 CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-09-22 | CVE-2026-94127 | F5 BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 2026-09-25 |
| 2026-03-27 | CVE-2025-53521 | F5 BIG-IP F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | 2026-03-30 |
| 2023-10-31 | CVE-2023-46748 | F5 BIG-IP Configuration Utility F5 BIG-IP Configuration Utility SQL Injection Vulnerability | 2023-11-21 |
| 2023-10-31 | CVE-2023-46747 | F5 BIG-IP Configuration Utility F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability Ransomware | 2023-11-21 |