F5 BIG IP Next SPK vulnerabilities, page 2
23 vulnerabilities
Known vulnerabilities in F5 BIG IP Next SPK, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-42409f5 · big-ip +25 moreBIG-IP HTTP/2 vulnerabilityWhen an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.46%HighCVE-2023-40534f5 · big-ip +21 moreBIG-IP HTTP/2 vulnerabilityWhen a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated with the virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.65%HighCVE-2023-45226f5 · big-ip_next_service_proxy_for_kubernetes +1 moreBIG-IP Next SPK SSH vulnerabilityThe BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow an attacker with the ability to intercept traffic to impersonate the SPK Secure Shell (SSH) server on those containers. This is only exposed when ssh debug is enabled. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedEPSS0.46%