F5 Big Ip Automation Toolchain vulnerabilities, page 5
85 vulnerabilities
Known vulnerabilities in F5 Big Ip Automation Toolchain, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-34176f5big-ip+21
EPSS score0.90%
When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.CVE-2026-34019f5big-ip+21EPSS score0.40%
When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets and cause the configured routing protocol to fail over. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.CVE-2026-35062f5big-ip+21EPSS score0.34%
An authenticated iControl SOAP user may be able to obtain information of other accounts.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.CVE-2023-46748f5big-ip+20KEVEPSS score4.47%
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which
may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedCVE-2023-46747f5big-ip+20KEVRansomwareEPSS score96.52%
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated