Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages. CISA required action: Apply updates per vendor instructions.

BIG-IP CVE-2020-5902

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-5902

BIG-IP

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-5902
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3551 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:37:27 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

F5 BIG-IP Missing Authentication Vulnerability

F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services. CISA required action: Apply updates per vendor instructions.

BIG-IP CVE-2022-1388

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2022-1388

BIG-IP

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2022-1388
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2595 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:32 GMT
Publisher date: Tue, 10 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

BIG-IP CVE-2025-53521

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2025-53521

BIG-IP

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2025-53521
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #203 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:42:15 GMT
Publisher date: Fri, 27 Mar 2026 00:00:00 GMT

Read the original announcement