Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
400,107CVE records
3,238Published, last 7 days
1,730In CISA KEV
1,480Critical, last 30 days
5,599Analysed
22:28 UTCLast NVD sync
Filters Show:
1,038 results. F5.
Page 2 of 52| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-42937 | High | 7.1 |  F5 Big Ip Access Policy Manager +20 | Incorrect permission assignment | - | - | 0.28% | May 13, 2026 |
| CVE-2026-42934 | Medium | 6.3 | F5 Dos +6 | Out-of-bounds read | - | - | 0.37% | May 13, 2026 |
| CVE-2026-42930 | High | 8.5 | F5 Big Ip Access Policy Manager +20 | CWE-35 | - | - | 0.58% | May 13, 2026 |
| CVE-2026-42926 | Medium | 6.3 | F5 Nginx Gateway Fabric +3 | CWE-172 | - | - | 0.34% | May 13, 2026 |
| CVE-2026-42924 | High | 8.5 | F5 Big Ip Access Policy Manager +20 | OS command injection | - | - | 0.41% | May 13, 2026 |
| CVE-2026-42920 | High | 8.7 | F5 Big Ip Access Policy Manager +20 | CWE-835 | - | - | 0.46% | May 13, 2026 |
| CVE-2026-42919 | High | 7.1 | F5 Big Ip Access Policy Manager +20 | Stack-based buffer overflow | - | - | 0.42% | May 13, 2026 |
| CVE-2026-42781 | High | 7.1 | F5 Big Ip Access Policy Manager +20 | CWE-835 | - | - | 0.27% | May 13, 2026 |
| CVE-2026-42780 | Medium | 6.9 | F5 Big Ip Ssl Orchestrator | Path traversal | - | - | 1.2% | May 13, 2026 |
| CVE-2026-42409 | High | 8.7 | F5 Big Ip Next Cloud Native Network Functi +22 | NULL pointer dereference | - | - | 0.46% | May 13, 2026 |
| CVE-2026-42408 | Medium | 6.7 | F5 Big Ip Access Policy Manager +20 | Cleartext storage of sensitive dat | - | - | 0.11% | May 13, 2026 |
| CVE-2026-42406 | High | 8.5 | F5 Big Ip Access Policy Manager +21 | CWE-267 | - | - | 0.25% | May 13, 2026 |
| CVE-2026-42063 | Medium | 6.9 | F5 Big Ip Access Policy Manager +20 | CWE-552 | - | - | 0.40% | May 13, 2026 |
| CVE-2026-42058 | Medium | 5.3 | F5 Big Ip Access Policy Manager +20 | Incorrect permission assignment | - | - | 0.26% | May 13, 2026 |
| CVE-2026-41959 | High | 7.1 | F5 Big Ip Access Policy Manager +21 | Incorrect permission assignment | - | - | 0.28% | May 13, 2026 |
| CVE-2026-41957 | High | 8.7 | F5 Big Ip Access Policy Manager +21 | Deserialization of untrusted data | - | - | 0.87% | May 13, 2026 |
| CVE-2026-41956 | High | 8.7 | F5 Big Ip Access Policy Manager +22 | Stack-based buffer overflow | - | - | 0.46% | May 13, 2026 |
| CVE-2026-41954 | Medium | 6.9 | F5 Big Ip Access Policy Manager +21 | Information exposure | - | - | 0.40% | May 13, 2026 |
| CVE-2026-41953 | High | 8.5 | F5 Big Ip Access Policy Manager +20 | Command injection | - | - | 0.41% | May 13, 2026 |
| CVE-2026-41227 | High | 8.7 | F5 Big Ip Advanced Web Application Firewal +2 | Allocation without limits | - | - | 0.46% | May 13, 2026 |
