F5
Security Risk Profile
46
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 25, 2022 to present
1000
Total CVEs
582
Critical+High
25
Exploited
166
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
166
Critical/High
Risk Level
46/100
medium
⚠️ 25 Active Exploits⚡ 4 Zero-Days📈 4 in Last 30 Days
Severity Distribution
Critical
54High
528Medium
333Low
64Exploit Likelihood
>50% chance
120-50%
15-20%
1<5%
83Age Distribution
Common Weaknesses (CWE)
1
Use After Free
55
2
Input Validation
49
3
Null Pointer Dereference
48
4
Buffer Overflow
47
5
Race Condition
38
Most Affected Products
1. F5 BIG-IP Access Policy Manager1416
2. F5 BIG-IP Application Security Manager1208
3. F5 Big-ip Local Traffic Manager1124
4. F5 BIG-IP Advanced Firewall Manager1123
5. F5 BIG-IP1101
Recent Vulnerabilities
See more →https://reddit.com/r/sysadmin/comments/1ux8udb/bigip_http2_vulnerability_cve202659762/
unknown
BIG-IP HTTP/2 Vulnerability – CVE-2026-59762
7/15/2026🔧 No Patch
CVE-2026-52865
CVSS 7.1high
NGINX Ingress Controller vulnerability
7/15/2026🔧 No Patch
CVE-2026-59762
CVSS 8.7high
BIG-IP HTTP/2 vulnerability
7/15/2026🔧 No Patch
CVE-2026-55723
CVSS 8.7high
NGINX Ingress Controller vulnerability
7/15/2026🔧 No Patch
bleepingcomputer-20260618113300
unknown
F5 issues out-of-band patches for critical NGINX vulnerabilities
6/18/2026🔧 No Patch
CVE-2026-32682
CVSS 7.1high
NGINX Gateway Fabric vulnerability
6/17/2026🔧 No Patch
CVE-2026-50107
CVSS 8.6high
NGINX Gateway Fabric vulnerability
6/17/2026🔧 No Patch
CVE-2026-11311
CVSS 8.6high
NGINX Gateway Fabric vulnerability
6/17/2026🔧 No Patch
CVE-2026-42530
CVSS 9.2critical
NGINX Open-Source ngx_http_v3_module vulnerability
6/17/2026🔧 No Patch
CVE-2026-42055
CVSS 9.2critical
NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
6/17/2026
Monitor F5 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.