F5 known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 8 F5 vulnerabilities: 2 added in the last 365 days, 7 rated critical (CVSS 9 or higher), and 4 with known ransomware use. The most recent was added Sep 22, 2026.

RSS feed for F5 exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEV	CVE	Vulnerability	CVSS	EPSS	Federal due date	Ransomware use
2026-09-22	CVE-2026-94127	F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability	9.3 (v4.0)	24.9%	2026-09-25	Unknown
2026-03-27	CVE-2025-53521	F5 BIG-IP Stack-Based Buffer Overflow Vulnerability	9.3 (v4.0)	2.3%	2026-03-30	Unknown
2023-10-31	CVE-2023-46747	F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability	9.8 (v3.1)	96.8%	2023-11-21	Known
2023-10-31	CVE-2023-46748	F5 BIG-IP Configuration Utility SQL Injection Vulnerability	8.8 (v3.1)	4.2%	2023-11-21	Unknown
2022-05-10	CVE-2022-1388	F5 BIG-IP Missing Authentication Vulnerability	9.8 (v3.1)	>99.9%	2022-05-31	Known
2022-01-18	CVE-2021-22991	F5 BIG-IP Traffic Management Microkernel Buffer Overflow	9.8 (v3.1)	62.4%	2022-02-01	Unknown
2021-11-03	CVE-2020-5902	F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability	9.8 (v3.1)	>99.9%	2022-05-03	Known
2021-11-03	CVE-2021-22986	F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability	9.8 (v3.1)	99.9%	2021-11-17	Known