Skip to content
OpenAdvisories
High · 7.5 CVE-2026-41227 EUVD-2026-29987GHSA-mggm-3mvj-fj65

BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability

Published May 13, 2026 · Updated May 13, 2026 · Assigned by f5

Description

On an HTTP/2 virtual server with Layer 7 DoS Protection configured, undisclosed traffic can result in an increase in memory consumption causing the Traffic Management Microkernel (TMM) process to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.5.0 – < 17.5.1.4, 17.1.0 – < 17.1.3.1, 16.1.0 17.5.1.4

Advisories 2

References