Class familyF5 · BIG-IP
F5 BIG-IP stack buffer overflow flaws, 2023–2026
6 BIG-IP CVEs with CWE-121 weaknesses, 1 Feb 2023 to 13 May 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2023’23
1 2024’24
2 2025’25
2 2026’26
In CISA KEVNot in KEV
20231 CVE
20241 CVE
20252 CVEs, 1 in KEV
20262 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2023-22842 | 1 Feb 2023 | BIG-IP SIP profile vulnerability | Grouped by weakness | 15.3 |
| CVE-2024-23982 | 14 Feb 2024 | BIG-IP PEM vulnerability | Grouped by weakness | 14.0 |
| CVE-2025-46405 | 13 Aug 2025 | BIG-IP APM vulnerability | Grouped by weakness | 10.6 |
| CVE-2025-53521KEV | 15 Oct 2025 | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | Grouped by weakness | 66.5 |
| CVE-2026-41956 | 13 May 2026 | BIG-IP TMM Vulnerability | Grouped by weakness | 8.9 |
| CVE-2026-42919 | 13 May 2026 | F5 BIG-IP Appliance Mode Vulnerability | Grouped by weakness | 9.0 |