Vendor
F5
As of , 8 F5 vulnerabilities are on CISA's list of exploited vulnerabilities, 4 of them used in ransomware campaigns; 2 were added in 2026. Patch first: CVE-2026-94127.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2026-94127Heap-based Buffer Overflow | F5 BIG-IP APM | Patch nowForensic triage required by CISA | 0.02 | ||
| 2 | CVE-2023-46747Authentication Bypass | F5 BIG-IP Configuration Utility | Patch this weekRansomware use; Metasploit module; EPSS 0.97 | 0.97 | ||
| 3 | CVE-2022-1388Missing Authentication | F5 BIG-IP | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| 4 | CVE-2020-5902Traffic Management User Interface (TMUI) Remote Code Execution | F5 BIG-IP | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| 5 | CVE-2021-22986iControl REST Remote Code Execution | F5 BIG-IP and BIG-IQ Centralized Management | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| 6 | CVE-2021-22991Buffer Overflow | F5 BIG-IP Traffic Management Microkernel | Patch this weekEPSS 0.61 | 0.61 | ||
| 7 | CVE-2023-46748SQL Injection | F5 BIG-IP Configuration Utility | Patch soon | 0.04 | ||
| 8 | CVE-2025-53521Stack-Based Buffer Overflow | F5 BIG-IP | Patch soon | 0.02 |
Products
- BIG-IP3 entries
- BIG-IP Configuration Utility2 entries
- BIG-IP and BIG-IQ Centralized Management1 entry
- BIG-IP APM1 entry
- BIG-IP Traffic Management Microkernel1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 2 |
| 2022 | 2 |
| 2023 | 2 |
| 2024 | none |
| 2025 | none |
| 2026 | 2 |