{"schema_version":"1","data":[{"id":3551,"advisory_id":"f1ac841e-3d54-47dc-9c4c-e5fa0d3f4d69","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-5902","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:27.564979+00:00","extraction_method":"structured","technologies":["big-ip","core-kev"],"cve_ids":["CVE-2020-5902"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","summary":"F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-5902","products":[{"name":{"value":"BIG-IP","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-5902","aliases":["CVE-2020-5902"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-22"],"cveID":"CVE-2020-5902","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5902","dueDate":"2022-05-03","product":"BIG-IP","dateAdded":"2021-11-03","vendorProject":"F5","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages.","vulnerabilityName":"F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2020-5902","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2595,"advisory_id":"81510cbc-4292-478c-8528-57b4f3d2eac5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-1388","source_published_at":"2022-05-10T00:00:00+00:00","published_at":"2026-10-24T21:21:32.713298+00:00","extraction_method":"structured","technologies":["big-ip","core-kev"],"cve_ids":["CVE-2022-1388"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"F5 BIG-IP Missing Authentication Vulnerability","summary":"F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-1388","products":[{"name":{"value":"BIG-IP","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-1388","aliases":["CVE-2022-1388"],"affected":[],"modified":"2022-05-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-306"],"cveID":"CVE-2022-1388","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-1388","dueDate":"2022-05-31","product":"BIG-IP","dateAdded":"2022-05-10","vendorProject":"F5","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.","vulnerabilityName":"F5 BIG-IP Missing Authentication Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-1388","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":203,"advisory_id":"e62ba78d-63df-4a6d-90eb-91ffbf92bd33","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53521","source_published_at":"2026-03-27T00:00:00+00:00","published_at":"2026-10-24T20:42:15.932544+00:00","extraction_method":"structured","technologies":["big-ip","core-kev"],"cve_ids":["CVE-2025-53521"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"F5 BIG-IP Stack-Based Buffer Overflow Vulnerability","summary":"F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2025-53521","products":[{"name":{"value":"BIG-IP","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-53521","aliases":["CVE-2025-53521"],"affected":[],"modified":"2026-03-27T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-121"],"cveID":"CVE-2025-53521","notes":"Please adhere to F5’s guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible F5 products affected by this vulnerability. For more information please see: https://my.f5.com/manage/s/article/K000156741 ; https://my.f5.com/manage/s/article/K000160486 ; https://my.f5.com/manage/s/article/K11438344 ; https://nvd.nist.gov/vuln/detail/CVE-2025-53521","dueDate":"2026-03-30","product":"BIG-IP","dateAdded":"2026-03-27","vendorProject":"F5","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution.","vulnerabilityName":"F5 BIG-IP Stack-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2025-53521","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3551,"next_before":203}