MEDIUM🇵🇱 Wersja polska

CVE-2026-34019

CVSS 6.3v4.0pub. 2026-05-13upd. 2026-06-29

When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets and cause the configured routing protocol to fail over.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • F5 Big Ip Access Policy Manager

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6

  • F5 Big Ip Advanced Firewall Manager

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6

  • F5 Big Ip Advanced Web Application Firewall

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Analytics

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6

  • F5 Big Ip Application Acceleration Manager

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6

  • F5 Big Ip Application Security Manager

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6

  • F5 Big Ip Application Visibility And Reporting

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6

  • F5 Big Ip Automation Toolchain

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Carrier Grade Nat

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Container Ingress Services

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6

  • F5 Big Ip Ddos Hybrid Defender

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Domain Name System

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Edge Gateway

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Fraud Protection Service

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Global Traffic Manager

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Link Controller

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Local Traffic Manager

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Policy Enforcement Manager

    APP
    F5
    17.5.016.1.0 – 16.1.617.1.0 – 17.1.2

  • F5 Big Ip Ssl Orchestrator

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6

  • F5 Big Ip Webaccelerator

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6

  • F5 Big Ip Websafe

    APP
    F5
    17.5.017.1.0 – 17.1.216.1.0 – 16.1.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-53521CRITICAL9.3⚠ KEVPL ✓same product

RCE w F5 BIG-IP APM poprzez złośliwy ruch sieciowy (stack buffer overflow)

CVE-2023-46747CRITICAL9.8⚠ KEVPL ✓same product

F5 BIG-IP: Obejście uwierzytelnienia i zdalne wykonanie poleceń (RCE)

CVE-2022-1388CRITICAL9.8⚠ KEVPL ✓same product

F5 BIG-IP: Pominięcie uwierzytelnienia iControl REST (RCE)

CVE-2021-22986CRITICAL9.8⚠ KEVPL ✓same product

F5 BIG-IP/BIG-IQ iControl REST — nieuwierzytelniony RCE

CVE-2021-22991CRITICAL9.8⚠ KEVPL ✓same product

Buffer overflow w TMM URI normalization F5 BIG-IP — DoS/RCE