VulnSocial

CVE-2026-59762Patch(f5 / big-ip_next_cloud-native_network_functions)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch f5 big-ip_next_cloud-native_network_functions systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.   Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote, unauthenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

f5 CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • big-ip_next_cloud-native_network_functions
  • big-ip_next_for_kubernetes
  • big-ip_next_service_proxy_for_kubernetes

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • General: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-07-15); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
f5
Products
big-ip_next_cloud-native_network_functionsbig-ip_next_for_kubernetesbig-ip_next_service_proxy_for_kubernetes

1 version affected across 3 products

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-07-15: 1Mentions · 2026-07-16: 1Mentions · 2026-07-23: 1Mentions · 2026-07-24: 1Patch / Workaround · 2026-07-15: 1Patch / Workaround · 2026-07-23: 1Patch / Workaround · 2026-07-24: 1Technical Details · 2026-07-15: 1Technical Details · 2026-07-23: 1Technical Details · 2026-07-24: 107-1507-1607-2307-24
Signal classification2 categories
Patch
375.0%
General
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-151
Patch1
2026-07-161
General1
2026-07-231
Patch1
2026-07-241
Patch1
Full discourse4 posts
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    An HTTP/2 DoS vulnerability lets unauthenticated attackers exhaust server memory via stalled flow control. CVE-2026-59762 and CVE-2026-59173 are patched. #HTTP2 #DoS #DenialOfService #CVE202659762 #CVE202659173 #FlowControl #InfoSec #PatchNow http://securityonline.info/http2-dos-vulnerability/

    Post summary

    The post announces that two HTTP/2 Denial‑of‑Service CVEs have been patched, briefly describes the vulnerability type, and directs readers to an external resource for details.

    00020412
    12.9K followersView on X
  • ThreatWire@ThreatWire_
    Patch

    🚨 CVE-2026-59762 & CVE-2026-59173: An HTTP/2 DoS vulnerability allows unauthenticated attackers to exhaust server memory through stalled flow control. Both vulnerabilities have been patched. #HTTP2 #DoS #CVE #CyberSecurity

    Post summary

    Two newly disclosed HTTP/2 DoS CVEs (CVE-2026-59762 & CVE-2026-59173) are now patched by vendors.

    00010112
    476 followersView on X
  • VulDB 🛡@vuldb
    General

    It is possible to see elevated activities targeting F5 BIG-IP and other products (CVE-2026-59762) https://vuldb.com/vuln/379272/cti

    Post summary

    The post notes increased activity targeting F5 BIG‑IP products in relation to CVE‑2026‑59762, but offers no technical, exploit, or mitigation details.

    0000196
    2.3K followersView on X
  • VulniPulse@vulnipulse
    Patch

    ⚠️ F5 BIG-IP alert: CVE-2026-59762 (CVSS 7.5) Unauthenticated attackers can abuse HTTP/2 to exhaust memory, restart TMM and disrupt applications. Upgrade to an F5-listed fixed release. https://vulnipulse.com/advisories/f5-cve-2026-59762 #F5 #BIGIP #HTTP2 #CyberSecurity #CVE

    Post summary

    The post announces CVE-2026-59762, details how unauthentic attackers can exhaust memory via HTTP/2 causing service disruption, and recommends upgrading to the vendor’s fixed release.

    0100082
    6 followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
Appf5big-ip_next_cloud-native_network_functions---
Appf5big-ip_next_cloud-native_network_functions2.3.0--
Appf5big-ip_next_for_kubernetes---
Appf5big-ip_next_for_kubernetes2.3.0--
Appf5big-ip_next_service_proxy_for_kubernetes---

Explore more

Back to dashboardf5 CVEsbig-ip_next_cloud-native_network_functions vulnerabilities