CVE-2026-40698
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can create SNMP configuration objects through iControl REST or the TMOS shell (tmsh) resulting in privilege escalation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
脆弱性の種類
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can create SNMP configuration objects through iControl REST or the TMOS shell (tmsh) resulting in privilege escalation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
影響を受ける製品
- f5 big-ip_access_policy_manager
- f5 big-ip_advanced_firewall_manager
- f5 big-ip_advanced_web_application_firewall
- f5 big-ip_analytics
- f5 big-ip_application_acceleration_manager
- f5 big-ip_application_security_manager
- f5 big-ip_application_visibility_and_reporting
- f5 big-ip_automation_toolchain