Skip to content
OpenAdvisories
High · 7.5 CVE-2026-41956 EUVD-2026-29990GHSA-7vhg-fvrv-7x3q

BIG-IP TMM Vulnerability

Published May 13, 2026 · Updated May 13, 2026 · Assigned by f5

Description

When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.5.0 – < 17.5.1.4, 17.1.0 – < 17.1.3.1, 16.1.0 17.5.1.4
F5 BIG-IP Next CNF 2.0.0 – < 2.0.3, 1.4.0 – < 1.4.1 2.0.3
F5 BIG-IP Next for Kubernetes 2.0.0 – < 2.1.0 2.1.0

Advisories 2

References