← Database

CVE-2026-20916

HIGH CVSS: 8.1 Published: 2026-05-13 Modified: 2026-06-29

Description

An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Platforms

F5 Big-Iq Centralized Management

Weakness Type

CWE-22

References