← Database

CVE-2026-41217

HIGH CVSS: 7.9 Published: 2026-05-13 Modified: 2026-06-24

Description

A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with resource administrator or administrator role to execute arbitrary system commands with higher privileges. In Appliance mode deployments, a successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Platforms

F5 Big-Ip Access Policy ManagerF5 Big-Ip Ssl OrchestratorF5 Big-Ip Container Ingress ServicesF5 Big-Ip Edge GatewayF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip AnalyticsF5 Big-Ip Global Traffic ManagerF5 Big-Ip WebacceleratorF5 Big-Ip Ddos Hybrid Defender

Weakness Type

CWE-732

References