Big Ip Next Cloud Native Network Functions

Vendor:

First CVE: Nov 21, 2023 · Active for 2 years

26
Total CVEs
More Total CVEs than 96% of tracked products
6.5
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 47% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Big Ip Next Cloud Native Network Functions over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 21, 2023
2 years ago
Most Recent CVE
May 13, 2026
76 days ago

CVE Severity & Scoring

Big Ip Next Cloud Native Network Functions26 CVEs
All CVEs353,173 CVEs
MediumHigh
Attack Vector
Local2 (7.7%)
Network24 (92.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low26 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None26 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (11.5%)
High1 (3.8%)
None22 (84.6%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (26 CVEs).

26 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-40629HIGH
When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections.  Note: Software versions which hav
May 13, 20267.532NONO
CVE-2026-40618HIGH
When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist Technology (QAT) or on BIG-IP hardware platforms with the database va
May 13, 20267.532NONO
CVE-2026-42409HIGH
When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management
May 13, 20267.529NONO
CVE-2026-41956HIGH
When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions
May 13, 20267.529NONO
CVE-2025-61990HIGH
When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which hav
Oct 15, 20257.525NONO
CVE-2025-58071HIGH
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End
Oct 15, 20257.525NONO
CVE-2025-60016HIGH
When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a v
Oct 15, 20257.525NONO
CVE-2025-59781HIGH
When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.   Note: Software versions
Oct 15, 20257.525NONO
CVE-2025-58120HIGH
When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical
Oct 15, 20257.525NONO
CVE-2025-54479HIGH
When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel (TMM) to termin
Oct 15, 20257.525NONO
View all 26 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (26 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (26 CVEs).

Media Mentions

Signals from CVEs in this product scope (26 CVEs).

Top CNAs Publishing CVEs For Big Ip Next Cloud Native Network Functions

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2.1.017.50.3%00
2.0.217.50.3%00
2.0.117.50.3%00
2.0.027.50.3%00
1.4.027.50.3%00