Directory Traversal Vulnerability in F5 Networks iControl REST API

CVE-2026-24464

What is CVE-2026-24464?

A directory traversal vulnerability exists in an undisclosed iControl REST endpoint when operating in Appliance mode. This vulnerability allows an authenticated attacker with administrator role privileges to navigate outside of the intended security boundaries and potentially delete critical files within the system. It is particularly concerning as it can be exploited by users with elevated permissions, making it essential for affected organizations to mitigate this risk promptly.

References