PT-2026-40668 · F5 · Big-Ip
CVE-2026-42063
·
Published
2026-05-13
·
Updated
2026-06-23
CVSS v3.1
4.9
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP versions prior to 17.1.3.2
F5 BIG-IP versions prior to 17.5.1.6
F5 BIG-IP versions prior to 21.0.0.2
Description
An authenticated attacker with the Resource Administrator or Administrator role can download sensitive files via iControl SOAP.
Recommendations
Update to version 17.1.3.2 or later.
Update to version 17.5.1.6 or later.
Update to version 21.0.0.2 or later.
Fix
Files Accessible to External Parties
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Big-Ip