Skip to content
THREATWIRE

CVE Tracker · Vendor

F5 CVEs

8 CVEs in the tracker, 8 in the CISA KEV catalogue.

All vendors · RSS feed for F5 · Tracker data last updated 18 Oct 2026.

Showing 8 of 8

  1. CVE-2026-94127CVSS 9.3 criticalEPSS 2.23%KEV2026-09-22

    BIG-IP APM. F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

  2. CVE-2022-1388CVSS 9.8 criticalEPSS 100%KEV2022-05-05

    BIG-IP. F5 BIG-IP Missing Authentication Vulnerability

  3. CVE-2021-22986CVSS 9.8 criticalEPSS 100%KEV2021-03-31

    BIG-IP and BIG-IQ Centralized Management. F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

  4. CVE-2020-5902CVSS 9.8 criticalEPSS 100%KEV2020-07-01

    BIG-IP. F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

  5. CVE-2025-53521No CVSSEPSS 2.30%KEV

    BIG-IP. F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

  6. CVE-2023-46748No CVSSEPSS 4.47%KEV

    BIG-IP Configuration Utility. F5 BIG-IP Configuration Utility SQL Injection Vulnerability

  7. CVE-2023-46747No CVSSEPSS 96.5%KEV

    BIG-IP Configuration Utility. F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

  8. CVE-2021-22991No CVSSEPSS 61.1%KEV

    BIG-IP Traffic Management Microkernel. F5 BIG-IP Traffic Management Microkernel Buffer Overflow