F
F5
Security Risk Profile
46
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 25, 2022 to present
1000
Total CVEs
584
Critical+High
25
Exploited
159
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
159
Critical/High
Risk Level
46/100
medium
⚠️ 25 Active Exploits⚡ 4 Zero-Days📈 2 in Last 30 Days
Severity Distribution
Critical
57High
527Medium
330Low
65Exploit Likelihood
>50% chance
120-50%
15-20%
1<5%
83Age Distribution
Common Weaknesses (CWE)
1
Use After Free
56
2
Buffer Overflow
48
3
Input Validation
48
4
Null Pointer Dereference
44
5
Race Condition
38
Most Affected Products
1. F5 BIG-IP Access Policy Manager1399
2. F5 BIG-IP Application Security Manager1191
3. F5 Big-ip Local Traffic Manager1107
4. F5 BIG-IP Advanced Firewall Manager1103
5. F5 BIG-IP1102
Recent Vulnerabilities
See more →CVE-2026-63020
CVSS 2.3low
BIG-IP Configuration utility vulnerability
Sep 2, 2026🔧 No Patch
CVE-2026-66842
CVSS 8.7high
BIG-IP and BIG-IQ Configuration utility vulnerability
Sep 2, 2026🔧 No Patch
https://reddit.com/r/sysadmin/comments/1ux8udb/bigip_http2_vulnerability_cve202659762/
unknown
BIG-IP HTTP/2 Vulnerability – CVE-2026-59762
Jul 15, 2026🔧 No Patch
CVE-2026-60005
CVSS 8.8high
NGINX ngx_http_slice_module vulnerability
Jul 15, 2026
REDHAT-BUG-2500960
CVSS 4.0medium
Jul 15, 2026🔧 No Patch
CVE-2026-60065
CVSS 6.3medium
NGINX Plus ngx_stream_mqtt_filter_module vulnerability
Jul 15, 2026🔧 No Patch
CVE-2026-56434
CVSS 8.3high
NGINX ngx_http_ssi_module vulnerability
Jul 15, 2026
CVE-2026-42533
CVSS 9.2critical
NGINX Map directive and Regex matching vulnerability
Jul 15, 2026
CVE-2026-52865
CVSS 7.1high
NGINX Ingress Controller vulnerability
Jul 15, 2026🔧 No Patch
CVE-2026-60062
CVSS 5.3medium
NGINX Agent Vulnerability
Jul 15, 2026🔧 No Patch
Monitor F5 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.