CVE-2026-41227: BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability

Q: What is the severity of CVE-2026-41227?

CVE-2026-41227 has a high severity rating of 8.7.

Q: How do I fix CVE-2026-41227?

To address CVE-2026-41227, ensure your F5 BIG-IP software is updated to a version that mitigates this vulnerability.

Q: What systems are affected by CVE-2026-41227?

CVE-2026-41227 affects F5 Big-IP Advanced Web Application Firewall, F5 BIG-IP Application Security Manager, and F5 Big-ip DDoS Hybrid Defender.

Q: What impact does CVE-2026-41227 have on my system?

CVE-2026-41227 can lead to increased memory consumption, potentially causing the Traffic Management Microkernel (TMM) process to terminate.

Q: Is there a workaround for CVE-2026-41227?

Currently, the recommended approach for CVE-2026-41227 is to patch or upgrade your vulnerable F5 BIG-IP systems.

Published May 13, 2026

Updated

On an HTTP/2 virtual server with Layer 7 DoS Protection configured, undisclosed traffic can result in an increase in memory consumption causing the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Software

10 affected components

F5 Networks BIG-IP

F5 Big-ip Advanced Web Application Firewall>=17.1.0<=17.1.3

F5 Big-ip Advanced Web Application Firewall>=17.5.0<=17.5.1

F5 BIG-IP Application Security Manager>=17.1.0<=17.1.3

F5 BIG-IP Application Security Manager>=17.5.0<=17.5.1

F5 Big-ip Ddos Hybrid Defender>=17.1.0<=17.1.3

F5 Big-ip Ddos Hybrid Defender>=17.5.0<=17.5.1

F5 Big-ip Advanced Web Application Firewall>=16.1.0<=16.1.6

F5 BIG-IP Application Security Manager>=16.1.0<=16.1.6

F5 Big-ip Ddos Hybrid Defender>=16.1.0<=16.1.6

Event History

May 13, 2026

CVE Published

via MITRE·02:12 PM

Data Sourced

via MITRE·02:12 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-41227?

CVE-2026-41227 has a high severity rating of 8.7.

How do I fix CVE-2026-41227?

To address CVE-2026-41227, ensure your F5 BIG-IP software is updated to a version that mitigates this vulnerability.

What systems are affected by CVE-2026-41227?

CVE-2026-41227 affects F5 Big-IP Advanced Web Application Firewall, F5 BIG-IP Application Security Manager, and F5 Big-ip DDoS Hybrid Defender.

What impact does CVE-2026-41227 have on my system?

CVE-2026-41227 can lead to increased memory consumption, potentially causing the Traffic Management Microkernel (TMM) process to terminate.

Is there a workaround for CVE-2026-41227?