跳到主要内容
CodeAuditAgent

CVE-2026-42937

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view adjacent network information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

弱点类型

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view adjacent network information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

受影响产品

  • f5 big-ip_access_policy_manager
  • f5 big-ip_advanced_firewall_manager
  • f5 big-ip_advanced_web_application_firewall
  • f5 big-ip_analytics
  • f5 big-ip_application_acceleration_manager
  • f5 big-ip_application_security_manager
  • f5 big-ip_application_visibility_and_reporting
  • f5 big-ip_automation_toolchain

参考链接

赶在攻击者之前发现漏洞。

使用 GitHub 登录,一分钟内即可运行你的第一次审计。免费版无需信用卡。