File Download Vulnerability in F5 iControl SOAP Affected by Resource Administrator Role

CVE-2026-42063

What is CVE-2026-42063?

A file download vulnerability exists within F5 Networks' iControl SOAP interface, which allows authenticated users with Resource Administrator or Administrator roles to download sensitive files. This poses a significant risk, as it could lead to unauthorized access to critical data. Organizations utilizing affected versions should take immediate action to apply necessary patches and review user permissions to mitigate potential exploitation.

References