Information Disclosure Vulnerability in F5 Networks iControl SOAP

CVE-2026-35062

What is CVE-2026-35062?

An authenticated user of the iControl SOAP interface on F5 Networks devices may exploit this vulnerability to access sensitive information pertaining to other user accounts, potentially undermining user privacy and security. This flaw can be particularly concerning in environments where multiple users operate with varying privilege levels, as it could allow for unauthorized data retrieval. It is vital for organizations to apply necessary patches and review their security postures to mitigate any risks associated with this vulnerability.

References