Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-22548 EUVD-2026-5490GHSA-7w3c-fcj4-v272

BIG-IP Advanced WAF and ASM vulnerability

Published Feb 4, 2026 · Updated Feb 4, 2026 · Assigned by f5

Description

When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's control can cause the bd process to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.1.0 – < 17.1.3 17.1.3

Advisories 1

References