← voltar
CVE-2026-41954

iControl REST and tmsh vulnerability

CVSS 6.9 MEDIUMEPSS 0.3%CWE-200
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
F5 · BIG-IPF5 · BIG-IQ

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →