Skip to content
OpenAdvisories
Low · 3.1 CVE-2026-63020 EUVD-2026-70135GHSA-7f8w-84hq-vpww

BIG-IP Configuration utility vulnerability

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by f5

Description

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages 

Impact:

An attacker may trick authenticated BIG-IP users
into accessing malicious links and reflect a spoofed error message in
the victim's BIG-IP Configuration utility web browser session. This is a
control plane issue; there is no data plane exposure.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 21.1.0 – < 21.1.0.1, 21.0.0 – < 21.0.0.3, 17.5.0 – < 17.5.1.8, 17.1.0 – < 17.1.3.4 21.1.0.1

Advisories 1

References