← Database
CVE-2026-42409
HIGH
CVSS: 7.5
Published: 2026-05-13
Modified: 2026-06-23
Description
When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Platforms
F5 Big-Ip Next Cloud-Native Network FunctionsF5 Big-Ip Access Policy ManagerF5 Big-Ip Ssl OrchestratorF5 Big-Ip Next For KubernetesF5 Big-Ip Container Ingress ServicesF5 Big-Ip Edge GatewayF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip AnalyticsF5 Big-Ip Global Traffic Manager