VulnSocial

CVE-2026-42930Disclosure(f5 / big-ip_access_policy_manager)

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

f5 CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-35

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • big-ip_access_policy_manager
  • big-ip_advanced_firewall_manager
  • big-ip_advanced_web_application_firewall
  • big-ip_analytics

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
f5
Products
big-ip_access_policy_managerbig-ip_advanced_firewall_managerbig-ip_advanced_web_application_firewallbig-ip_analyticsbig-ip_application_acceleration_managerbig-ip_application_security_managerbig-ip_application_visibility_and_reportingbig-ip_automation_toolchainbig-ip_carrier-grade_natbig-ip_container_ingress_services

1 version affected across 21 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-17: 1Technical Details · 2026-05-17: 105-17
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Israel@f1tym1
    Disclosure

    CVE-2026-42930 | F5 BIG-IP prior 17.1.3.2/17.5.1.6/21.0.0.2 Appliance Mode path traversal (K000160876 / WID-SEC-2026-1532) https://ift.tt/7nkSwPN A vulnerability has been found in F5 BIG-IP and classified as problematic. The affected element is an unknown function of the compo…

    Post summary

    The post announces CVE-2026-42930, noting it as a path traversal flaw in certain F5 BIG‑IP releases, without discussing patches, PoCs, or active exploitation.

    0000046
    974 followersView on X
CPE platform detail42 entries

42 of 42 entries

PartVendorProductVersionTarget SWTarget HW
Appf5big-ip_access_policy_manager---
Appf5big-ip_access_policy_manager21.0.0--
Appf5big-ip_advanced_firewall_manager---
Appf5big-ip_advanced_firewall_manager21.0.0--
Appf5big-ip_advanced_web_application_firewall---
Appf5big-ip_advanced_web_application_firewall21.0.0--
Appf5big-ip_analytics---
Appf5big-ip_analytics21.0.0--
Appf5big-ip_application_acceleration_manager---
Appf5big-ip_application_acceleration_manager21.0.0--
Appf5big-ip_application_security_manager---
Appf5big-ip_application_security_manager21.0.0--
Appf5big-ip_application_visibility_and_reporting---
Appf5big-ip_application_visibility_and_reporting21.0.0--
Appf5big-ip_automation_toolchain---
Appf5big-ip_automation_toolchain21.0.0--
Appf5big-ip_carrier-grade_nat---
Appf5big-ip_carrier-grade_nat21.0.0--
Appf5big-ip_container_ingress_services---
Appf5big-ip_container_ingress_services21.0.0--
Appf5big-ip_ddos_hybrid_defender---
Appf5big-ip_ddos_hybrid_defender21.0.0--
Appf5big-ip_domain_name_system---
Appf5big-ip_domain_name_system21.0.0--
Appf5big-ip_edge_gateway---
Appf5big-ip_edge_gateway21.0.0--
Appf5big-ip_fraud_protection_service---
Appf5big-ip_fraud_protection_service21.0.0--
Appf5big-ip_global_traffic_manager---
Appf5big-ip_global_traffic_manager21.0.0--
Appf5big-ip_link_controller---
Appf5big-ip_link_controller21.0.0--
Appf5big-ip_local_traffic_manager---
Appf5big-ip_local_traffic_manager21.0.0--
Appf5big-ip_policy_enforcement_manager---
Appf5big-ip_policy_enforcement_manager21.0.0--
Appf5big-ip_ssl_orchestrator---
Appf5big-ip_ssl_orchestrator21.0.0--
Appf5big-ip_webaccelerator---
Appf5big-ip_webaccelerator21.0.0--
Appf5big-ip_websafe---
Appf5big-ip_websafe21.0.0--

Explore more

Back to dashboardf5 CVEsbig-ip_access_policy_manager vulnerabilities