Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-iq:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Iq (19f5b75f-cf42-55d4-b334-1ee5de5a6a2f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-42937 |
vulnerable | 2026-06-08 08:03:16.982976 |
iControl REST and tmsh vulnerability
MEDIUM (6.5)
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view adjacent network information.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2026-05-13T14:12:40.132Z
Updated: 2026-05-13T16:09:45.227Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42406 |
vulnerable | 2026-06-08 08:03:16.282994 |
BIG-IP and BIG-IQ privilege escalation vulnerability
HIGH (8.7)
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2026-05-13T14:12:41.288Z
Updated: 2026-05-14T03:56:11.791Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41959 |
vulnerable | 2026-06-08 08:03:15.810397 |
iControl and tmsh REST vulnerability
MEDIUM (6.5)
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics commands and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view the network status of destination systems.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2026-05-13T14:12:41.700Z
Updated: 2026-05-13T16:08:46.551Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41957 |
vulnerable | 2026-06-08 08:03:15.809761 |
BIG-IP and BIG-IQ Configuration utility vulnerability
HIGH (8.8)
An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2026-05-13T14:12:30.975Z
Updated: 2026-05-14T03:56:14.099Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41954 |
vulnerable | 2026-06-08 08:03:15.805169 |
iControl REST and tmsh vulnerability
MEDIUM (4.9)
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2026-05-13T14:12:27.618Z
Updated: 2026-05-13T16:17:41.943Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41219 |
vulnerable | 2026-06-08 08:03:15.076226 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40698 |
vulnerable | 2026-06-08 08:01:20.922774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32643 |
vulnerable | 2026-06-08 07:57:17.792044 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20916 |
vulnerable | 2026-06-08 07:49:13.412233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47139 |
vulnerable | 2026-06-08 06:48:11.494686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21782 |
vulnerable | 2026-06-08 06:27:36.599386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43485 |
vulnerable | 2026-06-08 06:12:31.618510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41964 |
vulnerable | 2026-06-08 06:11:07.523060 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38419 |
vulnerable | 2026-06-08 06:08:17.855173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29240 |
vulnerable | 2026-06-08 06:02:39.173321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41770 |
vulnerable | 2026-06-08 05:48:30.941032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41694 |
vulnerable | 2026-06-08 05:48:30.800397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6688 |
vulnerable | 2026-06-08 05:14:12.964127 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6665 |
vulnerable | 2026-06-08 05:14:12.733476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.