F
F5
Security Risk Profile
46
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 25, 2022 to present
1000
Total CVEs
586
Critical+High
25
Exploited
161
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
161
Critical/High
Risk Level
46/100
medium
⚠️ 25 Active Exploits⚡ 4 Zero-Days
Severity Distribution
Critical
57High
529Medium
329Low
64Exploit Likelihood
>50% chance
120-50%
15-20%
1<5%
83Age Distribution
Common Weaknesses (CWE)
1
Use After Free
56
2
Input Validation
49
3
Buffer Overflow
48
4
Null Pointer Dereference
46
5
Race Condition
38
Most Affected Products
1. F5 BIG-IP Access Policy Manager1406
2. F5 BIG-IP Application Security Manager1198
3. F5 Big-ip Local Traffic Manager1114
4. F5 BIG-IP Advanced Firewall Manager1110
5. F5 BIG-IP1101
Recent Vulnerabilities
See more →https://reddit.com/r/sysadmin/comments/1ux8udb/bigip_http2_vulnerability_cve202659762/
unknown
BIG-IP HTTP/2 Vulnerability – CVE-2026-59762
Jul 15, 2026🔧 No Patch
CVE-2026-60005
CVSS 8.8high
NGINX ngx_http_slice_module vulnerability
Jul 15, 2026
CVE-2026-60065
CVSS 6.3medium
NGINX Plus ngx_stream_mqtt_filter_module vulnerability
Jul 15, 2026🔧 No Patch
CVE-2026-56434
CVSS 8.3high
NGINX ngx_http_ssi_module vulnerability
Jul 15, 2026
CVE-2026-42533
CVSS 9.2critical
NGINX Map directive and Regex matching vulnerability
Jul 15, 2026
CVE-2026-52865
CVSS 7.1high
NGINX Ingress Controller vulnerability
Jul 15, 2026🔧 No Patch
CVE-2026-60062
CVSS 5.3medium
NGINX Agent Vulnerability
Jul 15, 2026🔧 No Patch
CVE-2026-59762
CVSS 8.7high
BIG-IP HTTP/2 vulnerability
Jul 15, 2026🔧 No Patch
CVE-2026-55723
CVSS 8.7high
NGINX Ingress Controller vulnerability
Jul 15, 2026🔧 No Patch
bleepingcomputer-20260618113300
unknown
F5 issues out-of-band patches for critical NGINX vulnerabilities
Jun 18, 2026🔧 No Patch
Monitor F5 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.