← Database
CVE-2026-40703
MEDIUM
CVSS: 5.4
Published: 2026-05-13
Modified: 2026-06-24
Description
A cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Platforms
F5 Big-Ip Access Policy ManagerF5 Big-Ip Ssl OrchestratorF5 Big-Ip Container Ingress ServicesF5 Big-Ip Edge GatewayF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip AnalyticsF5 Big-Ip Global Traffic ManagerF5 Big-Ip WebacceleratorF5 Big-Ip Ddos Hybrid Defender