Summary
Ein Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um falsche Informationen darzustellen und um Administratorrechte zu erlangen.
Product
BIG-IP ist eine Netzwerk Appliance auf der die meisten F5 Produkte laufen.
Vulnerabilities 2
-
High 8.8
BIG-IP and BIG-IQ Configuration utility vulnerability
BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI). Impact: This vulnerability may allow an authenticated attacker wi…
-
Low 3.1
BIG-IP Configuration utility vulnerability
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the v…
Revision history
-
#1
Initiale Fassung
References
-
F5 Security Advisory vom 2026-09-02
https://my.f5.com/manage/s/article/K000161728
-
F5 Security Advisory vom 2026-09-02
https://my.f5.com/manage/s/article/K000162521
-
GitHub Security Advisory GHSA-7f8w-84hq-vpww vom 2026-09-02
https://github.com/advisories/GHSA-7f8w-84hq-vpww
-
GitHub Security Advisory GHSA-CGM7-WQWH-H7HH vom 2026-09-02
https://github.com/advisories/GHSA-CGM7-WQWH-H7HH