CVE Tools

F5

886 CVEs tracked since 2002. Since Jul 2016, 7 of them reached CISA KEV.

F5 CVEs per month

Jul 2016 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
F5 CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2016-0710
2016-08null or fewer
2016-0920
2016-1020
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-0220
2017-0340
2017-04null or fewer
2017-05100
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-09null or fewer
2017-10110
2017-11null or fewer
2017-12140
2018-0120
2018-02null or fewer
2018-03110
2018-04null or fewer
2018-05null or fewer
2018-06100
2018-07170
2018-0830
2018-0961
2018-10180
2018-11null or fewer
2018-12100
2019-01null or fewer
2019-02150
2019-03null or fewer
2019-04null or fewer
2019-05190
2019-06null or fewer
2019-07300
2019-0850
2019-09150
2019-10110
2019-11210
2019-12160
2020-0150
2020-0240
2020-0370
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08210
2020-0920
2020-1080
2020-1190
2020-12210
2021-01null or fewer
2021-02130
2021-03null or fewer
2021-04null or fewer
2021-0590
2021-0690
2021-07null or fewer
2021-08null or fewer
2021-09311
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-01250
2022-0230
2022-03null or fewer
2022-0440
2022-05451
2022-0630
2022-0760
2022-08210
2022-09null or fewer
2022-10210
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02170
2023-03null or fewer
2023-0460
2023-05100
2023-06null or fewer
2023-07null or fewer
2023-0870
2023-09null or fewer
2023-10183
2023-11null or fewer
2023-12null or fewer
2024-01null or fewer
2024-02200
2024-03null or fewer
2024-04null or fewer
2024-05180
2024-06null or fewer
2024-07null or fewer
2024-08100
2024-09null or fewer
2024-10null or fewer
2024-11null or fewer
2024-12null or fewer
2025-01null or fewer
2025-02170
2025-03null or fewer
2025-04null or fewer
2025-05120
2025-06null or fewer
2025-07null or fewer
2025-0860
2025-09null or fewer
2025-10441
2025-11null or fewer
2025-12null or fewer
2026-01null or fewer
2026-0260
2026-03null or fewer
2026-04null or fewer
2026-05530
2026-06null or fewer
2026-0780
2026-08null or fewer
2026-0980

Products

The products that kept showing up in F5's monthly top three, with their CVEs summed over those months.

  1. BIG-IP Access Policy Manager36338 months
  2. BIG-IP Application Security Manager28222 months
  3. BIG-IP Advanced Firewall Manager19521 months
  4. BIG-IP16013 months
  5. BIG-IP Policy Enforcement Manager889 months
  6. BIG-IP Domain Name System798 months
  7. BIG-IP Local Traffic Manager6911 months
  8. BIG-IP Application Acceleration Manager609 months
  9. BIG-IP SSL Orchestrator302 months
  10. BIG-IP Advanced Web Application Firewall292 months

Latest CVEs

The 15 most recently published vulnerabilities affecting F5.

  1. CVE-2026-94127BIG-IP APM OAuth vulnerability9.8
  2. CVE-2026-90439NGINX ngx_http_v3_module vulnerability6.5
  3. CVE-2026-78222NGINX ngx_http_js_module vulnerability7.5
  4. CVE-2026-78689NGINX ngx_http_js_module vulnerablility8.1
  5. CVE-2026-77180NGINX Ingress Controller vulnerability8.3
  6. CVE-2026-66362NGF vulnerability8.1
  7. CVE-2026-18329NGINX ngx_http_js_module vulnerability8.2
  8. CVE-2026-63020BIG-IP Configuration utility vulnerability3.1
  9. CVE-2026-66842BIG-IP and BIG-IQ Configuration utility vulnerability8.8
  10. CVE-2026-60005NGINX ngx_http_slice_module vulnerability8.2
  11. CVE-2026-56434NGINX ngx_http_ssi_module vulnerability6.5
  12. CVE-2026-60065NGINX Plus ngx_stream_mqtt_filter_module vulnerability3.7
  13. CVE-2026-60062NGINX Agent Vulnerability6.4
  14. CVE-2026-52865NGINX Ingress Controller vulnerability6.5
  15. CVE-2026-42533NGINX Map directive and Regex matching vulnerability8.1

The record

Peak rank
#16 in May 2026
Busiest month shown
May 2026, 53 CVEs
Months with a KEV entry
5 since Jul 2016
Monthly snapshots
115 since 2002
F5's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store