netVigilance Vulnerability intelligence since 2004

F5

7 F5 vulnerabilities with confirmed exploitation in the wild, as published by CISA; 7 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for F5
Vulnerability Status
overdue 164d2026-03-30 CVE-2025-53521 F5 / BIG-IP F5 BIG-IP Stack-Based Buffer Overflow Vulnerability 2026-03-27 9.3 past due
overdue 1024d2023-11-21 CVE-2023-46748 F5 / BIG-IP Configuration Utility F5 BIG-IP Configuration Utility SQL Injection Vulnerability 2023-10-31 8.8 past due
overdue 1024d2023-11-21 CVE-2023-46747 F5 / BIG-IP Configuration Utility F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability 2023-10-31 9.8 past dueransomware
overdue 1563d2022-05-31 CVE-2022-1388 F5 / BIG-IP F5 BIG-IP Missing Authentication Vulnerability 2022-05-10 9.8 past dueransomware
overdue 1682d2022-02-01 CVE-2021-22991 F5 / BIG-IP Traffic Management Microkernel F5 BIG-IP Traffic Management Microkernel Buffer Overflow 2022-01-18 9.8 past due
overdue 1758d2021-11-17 CVE-2021-22986 F5 / BIG-IP and BIG-IQ Centralized Management F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1591d2022-05-03 CVE-2020-5902 F5 / BIG-IP F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability 2021-11-03 9.8 past dueransomware