Remote Code Execution Vulnerability in F5 BIG-IP and BIG-IQ Configuration Utility
CVE-2026-41957

8.7HIGH

Key Information:

Vendor

F5
Status
Big-ip
Big-iq
Vendor
CVE Published:
13 May 2026

What is CVE-2026-41957?

An authenticated remote code execution vulnerability affects the F5 BIG-IP and BIG-IQ Configuration Utility. This issue arises due to undisclosed vectors that could allow attackers to execute arbitrary code with elevated privileges. Users are urged to apply patches and ensure that only supported software versions are in use to mitigate potential exploitations.

Affected Version(s)

BIG-IP 17.5.0 < 17.5.1.4

BIG-IP 17.1.0 < 17.1.3.1

BIG-IP 16.1.0

References

https://my.f5.com/manage/s/article/K000156761
vendor-advisorypatch

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F5
.