CVE-2024-26026

HIGH 7.5EPSS 7.2%

An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 7.16% chance of exploitation in the next 30 days, 94th percentile
Published: 2024-05-08
Updated: 2025-09-18

Proof-of-concept exploits (2)

GRTMALDET/Big-IP-Next-CVE-2024-260260★ · 2024-05-13
passwa11/CVE-2024-260265★ · 2024-05-09

References

Related