InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product f5:big-ip_ssl_orchestrator. Show all products

65 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2023-44487
Known exploited
High 7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Assigned by mitre
Oct 10, 2023
CVE-2023-46747
Known exploited
Critical 9.8BIG-IP Configuration utility unauthenticated remote code execution vulnerability
Assigned by f5
Oct 26, 2023
CVE-2023-46748
Known exploited
High 8.8BIG-IP Configuration utility authenticated SQL injection vulnerability
Assigned by f5
Oct 26, 2023
CVE-2025-41430High 7.5When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Oct 15, 2025
CVE-2025-46706High 7.5When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Oct 15, 2025
CVE-2025-47148Medium 6.5When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity Provider (IdP), with single logout (SLO) enabled on an access policy, undis…Oct 15, 2025
CVE-2025-48008High 7.5When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Micro…Oct 15, 2025
CVE-2025-53474High 7.5When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Oct 15, 2025
CVE-2025-53856High 7.5When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic…Oct 15, 2025
CVE-2025-53868High 8.7When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed commands.Oct 15, 2025
CVE-2025-54755Medium 4.9A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files which are not limited to the intended files.Oct 15, 2025
CVE-2025-55036High 7.5When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy connect feature is enabled, undisclosed traffic may cause memory corruption.Oct 15, 2025
CVE-2025-58096High 7.5When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Oct 15, 2025
CVE-2025-58153Medium 5.9Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) may experience a lockup of the HSB.Oct 15, 2025
CVE-2025-58424Medium 5.3On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have message integrity protection.Oct 15, 2025
CVE-2025-59268Medium 5.3On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility.Oct 15, 2025
CVE-2025-59269Medium 6.1A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in…Oct 15, 2025
CVE-2025-59481High 8.7A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to execute arbitrary sys…Oct 15, 2025
CVE-2025-59483Medium 6.5A validation vulnerability exists in an undisclosed URL in the Configuration utility.Oct 15, 2025
CVE-2025-59781High 7.5When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.Oct 15, 2025
CVE-2025-61951High 7.5Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Oct 15, 2025
CVE-2025-61958High 8.7A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell.Oct 15, 2025
CVE-2025-58071High 7.5When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Oct 15, 2025
CVE-2025-61990High 7.5When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Oct 15, 2025
CVE-2026-20732Medium 4.3A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages.Feb 4, 2026
CVE-2026-24464Medium 6.8When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cros…May 13, 2026
CVE-2026-32643High 8.7A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running ar…May 13, 2026
CVE-2026-32673High 8.7A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary system commands with higher priv…May 13, 2026
CVE-2026-34019Medium 5.3When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD pack…May 13, 2026
CVE-2026-34176High 8.7When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint.May 13, 2026
CVE-2026-35062Medium 6.5An authenticated iControl SOAP user may be able to obtain information of other accounts.May 13, 2026
CVE-2026-39455High 7.5When the BIG-IP Configuration utility is configured to use Lightweight Directory Access Protocol (LDAP) authentication, undisclosed traffic can cause the httpd process to exhaust the available file d…May 13, 2026
CVE-2026-39458High 7.5When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, Advanced WAF DoS protection), undisclosed traffic can cause the Traffic Management Microker…May 13, 2026
CVE-2026-39459High 7.2A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects that allow running…May 13, 2026
CVE-2026-40423High 7.5When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.May 13, 2026
CVE-2026-40435Medium 5.3When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses.May 13, 2026
CVE-2026-40462Medium 6.5Incorrect permission assignment vulnerabilities exist in iControl REST and TMOS shell (tmsh) undisclosed command which may allow an authenticated attacker to view sensitive information.May 13, 2026
CVE-2026-40618High 7.5When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist Technology (QAT) or on BIG-IP hardware platforms with the database variable crypto.hwacc…May 13, 2026
CVE-2026-40629High 7.5When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections.May 13, 2026
CVE-2026-40631High 8.7An authenticated attacker with the Resource Administrator or Administrator role can modify configuration objects through iControl SOAP resulting in privilege escalation.May 13, 2026
CVE-2026-40698High 8.7A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can create SNMP configuration objects through iCont…May 13, 2026
CVE-2026-40699Medium 6.5A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information.May 13, 2026
CVE-2026-40703Medium 5.4A cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility.May 13, 2026
CVE-2026-41217High 7.9A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with resource administrator or administrator role to execute arbitrary system comman…May 13, 2026
CVE-2026-41218High 7.5When BIG-IP PEM iRules are configured on a virtual server (iRules using commands starting with CLASSIFICATION::, CLASSIFY::, PEM::, PSC::, and the urlcatquery command), undisclosed traffic can cause…May 13, 2026
CVE-2026-41219Medium 6.5An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file.May 13, 2026
CVE-2026-41225Critical 9.1A vulnerability exists in iControl REST where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects that allow running arbitrary commands.May 13, 2026
CVE-2026-41953High 8.7A vulnerability exists in BIG-IP systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can modify configuration objects resulting in privilege escala…May 13, 2026
CVE-2026-41954Medium 4.9Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator rol…May 13, 2026
CVE-2026-41956High 7.5When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.May 13, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.