F5-K000163777: High severity F5 F5 Insight vulnerability

Q: What does an attacker need in order to exploit this issue?

The attacker can operate remotely over the network and does not need prior privileges. Exploitation requires presenting a specially crafted certificate containing URI or SRV Subject Alternative Names and requires user interaction.

Q: What is the expected security impact?

The issue may allow spoofing of legitimate services or interception of sensitive information. Integrity impact is rated high, confidentiality impact low, and no availability impact is indicated.

Published Oct 19, 2026

Updated

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.

Affected Software

1 affected componentFixes available

F5 F5 Insight>=1.0.0<=1.1.0

1.1.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.1.1

Event History

Oct 19, 2026

Advisory Published

via F5·08:17 PM

Data Sourced

via F5·08:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What does an attacker need in order to exploit this issue?

The attacker can operate remotely over the network and does not need prior privileges. Exploitation requires presenting a specially crafted certificate containing URI or SRV Subject Alternative Names and requires user interaction.

What is the expected security impact?

The issue may allow spoofing of legitimate services or interception of sensitive information. Integrity impact is rated high, confidentiality impact low, and no availability impact is indicated.

F5-K000163777: High severity F5 F5 Insight vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need in order to exploit this issue?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need in order to exploit this issue?

What is the expected security impact?