← Voltar à pesquisa de CVEs

CVE-2026-40698

F5 BIG-IP

Descrição

A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can create SNMP configuration objects through iControl REST or the TMOS shell (tmsh) resulting in privilege escalation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS 8.7EPSS 0.23500000000000001%Risco 0.89
Ver fonte
Publicação
2026-05-13 16:16:43
Versões afetadas
unknown
Tipo
Core software
Vetor
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N